{"vulnerability": "cve-2013-1966", "sightings": [{"uuid": "908488c7-452f-4a6b-9cbd-7367fcfece2e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-1966", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-06T03:13:41.000000Z"}, {"uuid": "85edc1c8-ce35-4812-bb15-afadbe83b43f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-1966", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:09:14.000000Z"}, {"uuid": "d3973510-0ab4-4c3a-a7e1-23837acd0423", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-1966", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/struts_include_params.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "e4c1f477-9a06-412a-a17f-514a61e62645", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-1966", "type": "seen", "source": "https://gist.github.com/aw-junaid/6ba7bcfb795f6a9e31d2f07c98443ebb", "content": "", "creation_timestamp": "2026-04-05T07:50:38.000000Z"}, {"uuid": "dfb725e0-f8aa-490e-adee-44b00531a3ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "db99543d-496c-4eef-ad0a-2df2093364df", "vulnerability": "CVE-2013-1966", "type": "confirmed", "source": "https://www.exploit-db.com/exploits/25980", "content": "", "creation_timestamp": "2013-06-05T00:00:00.000000Z"}, {"uuid": "97a4e2d5-d49d-47d3-be0f-2243b6c10613", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-1966", "type": "seen", "source": "https://t.me/arpsyndicate/1935", "content": "#ExploitObserverAlert\n\nCVE-2013-1966\n\nDESCRIPTION: Exploit Observer has 18 entries related to CVE-2013-1966. Apache Struts 2 before 2.3.14.2 allows remote attackers to execute arbitrary OGNL code via a crafted request that is not properly handled when using the includeParams attribute in the (1) URL or (2) A tag.\n\nFIRST-EPSS: 0.018580000\nNVD-IS: 10.0\nNVD-ES: 8.6", "creation_timestamp": "2023-12-18T07:08:26.000000Z"}, {"uuid": "e4b12a8a-3e40-4c4b-9a23-c64fb8201125", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-1966", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/struts_include_params.rb", "content": "{\"aliases\": [], \"arch\": \"x86, java\", \"author\": [\"Eric Kobrin\", \"Douglas Rodrigues\", \"Richard Hicks \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits a remote command execution vulnerability in Apache Struts\\n          versions < 2.3.14.2. A specifically crafted request parameter can be used to inject\\n          arbitrary OGNL code into the stack bypassing Struts and OGNL library protections.\\n          When targeting an action which requires interaction through GET, the payload should\\n          be split, taking into account the URI limits. In this case, if the rendered JSP has\\n          more than one point of injection, it could result in payload corruption. This should\\n          happen only when the payload is larger than the URI length.\", \"disclosure_date\": \"2013-05-24\", \"fullname\": \"exploit/multi/http/struts_include_params\", \"is_install_path\": true, \"mod_time\": \"2026-04-22 11:58:04 +0000\", \"name\": \"Apache Struts includeParams Remote Code Execution\", \"needs_cleanup\": true, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/multi/http/struts_include_params.rb\", \"platform\": \"Java,Linux,Windows\", \"post_auth\": false, \"rank\": 500, \"ref_name\": \"multi/http/struts_include_params\", \"references\": [\"CVE-2013-2115\", \"CVE-2013-1966\", \"OSVDB-93645\", \"URL-https://cwiki.apache.org/confluence/display/WW/S2-014\", \"URL-http://struts.apache.org/development/2.x/docs/s2-013.html\"], \"rport\": 8080, \"session_types\": false, \"targets\": [\"Windows Universal\", \"Linux Universal\", \"Java Universal\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:50:15.476517Z"}]}