CVE-2010-1871

This Metasploit module exploits CVE-2010-1871, a JBoss Seam 2 vulnerability allowing unauthenticated remote code execution via unsanitized JBoss Expression Language inputs. It uploads a malicious JSP and JAR payload to achieve a Meterpreter shell.

This Metasploit module exploits a remote command execution vulnerability in JBoss Seam 2 by leveraging unsanitized JBoss Expression Language (EL) inputs. It dynamically identifies method indices for 'Runtime.exec' and 'Runtime.getRuntime' to execute arbitrary commands via a crafted URL.

This Metasploit module exploits a JBoss Seam 2 vulnerability (CVE-2010-1871) to achieve remote code execution by uploading and executing a malicious JSP file. It leverages improper input sanitization in JBoss Expression Language to execute arbitrary commands.