CVE-2010-0219

This exploit targets a default credential vulnerability in Computer Associates ARCserve D2D r15's Apache Axis2 web service. It allows arbitrary code execution with SYSTEM privileges by uploading a malicious .aar file via the Axis2 admin interface.

This Metasploit module exploits CVE-2010-0219 by authenticating to an Axis2 Web Admin Module and uploading a malicious JAR file via SOAP to achieve remote code execution. It supports multiple platforms including Java, Windows, and Linux.

This Metasploit module exploits CVE-2010-0219 by authenticating to an Axis2 Web Admin Module and uploading a malicious JAR file via REST, achieving remote code execution. It supports multiple platforms (Java, Windows, Linux) and uses a deployed web service to trigger payload execution.

This exploit targets CVE-2010-0219, an arbitrary file upload vulnerability in Apache Axis2. It authenticates as an admin, uploads a malicious AAR file, and deploys a webshell for remote command execution.

This Metasploit module is a brute-force utility for Apache Axis2 login pages, attempting authentication using provided username and password combinations. It verifies the presence of the login page and systematically tests credentials.

This Metasploit module exploits an authenticated code execution vulnerability in Axis2 and SAP BusinessObjects via SOAP. It uploads a malicious JAR file as a web service and triggers execution through SOAP requests.