Exploitation Summary
EIP tracks 1 public exploit for CVE-2008-5448.
PoCs published by MC, including Metasploit module auxiliary/admin/oracle/osb_execqr.
AI-analyzed exploit summary This Metasploit module exploits a command injection vulnerability in Oracle Secure Backup by sending a crafted HTTP request to the login.php endpoint with a malicious command embedded in the rbtool parameter. The exploit leverages URI encoding to bypass input validation and execute arbitrary commands on the target system.
Description
Unspecified vulnerability in the Oracle Secure Backup component in Oracle Secure Backup 10.2.0.2 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2008-5444 and CVE-2008-5449.
Exploits (1)
This Metasploit module exploits a command injection vulnerability in Oracle Secure Backup by sending a crafted HTTP request to the login.php endpoint with a malicious command embedded in the rbtool parameter. The exploit leverages URI encoding to bypass input validation and execute arbitrary commands on the target system.