CVE-2012-3153

This Ruby script automates the exploitation of CVE-2012-3152 and CVE-2012-3153 in Oracle Reports 11.1 by uploading a malicious JSP payload to a vulnerable server. It enumerates keymaps, extracts server credentials, and leverages the 'showenv' endpoint to determine the local path for payload deployment.

This is a Ruby-based exploit for CVE-2012-3153 and CVE-2012-3152 targeting Oracle Reports. It automates the process of uploading a JSP payload to a vulnerable server via directory traversal and arbitrary file upload vulnerabilities.

This Metasploit module exploits CVE-2012-3153 in Oracle Forms and Reports to achieve remote code execution by leveraging directory traversal and arbitrary file write vulnerabilities to upload a JSP shell.