CVE-2009-1088
Hannon Hill Cascade Server 5.7 - Authenticated Remote Code Execution via XSLT Stylesheet
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2009-1088. PoCs published by Emory University.
AI-analyzed exploit summary This exploit leverages XSLT extension functions in Hannon Hill Cascade Server to execute arbitrary Java code, enabling command execution with the privileges of the Cascade Server process. The PoC demonstrates how an attacker with access to edit XSLT stylesheets can run shell commands via the java.lang.Runtime class.
Description
Hannon Hill Cascade Server 5.7 and other versions allows remote authenticated users to execute arbitrary programs or Java code via a crafted XSLT stylesheet with "extension elements and extension functions" that trigger code execution by Xalan-Java, as demonstrated using xalan://java.lang.Runtime.
Exploits (1)
This exploit leverages XSLT extension functions in Hannon Hill Cascade Server to execute arbitrary Java code, enabling command execution with the privileges of the Cascade Server process. The PoC demonstrates how an attacker with access to edit XSLT stylesheets can run shell commands via the java.lang.Runtime class.