CVE-2008-5457

This exploit targets a buffer overflow in BEA WebLogic's plugin when clustering is configured. It leverages a long JSESSIONID cookie value to achieve arbitrary code execution via a SEH-based exploit.

This exploit targets a buffer overflow vulnerability in a JSP application (CVE-2008-5457) by sending a maliciously crafted POST request with a long JSESSIONID parameter containing shellcode. It achieves remote code execution by overwriting the SEH and triggering a reverse shell.

This Metasploit module exploits a buffer overflow in BEA WebLogic's plugin via a maliciously crafted JSESSIONID cookie. It targets specific versions of the WebLogic module on Windows Apache 2.2, achieving remote code execution through SEH overwrites.