CVE-2018-10054

This exploit abuses H2 Database's alias functionality to create a custom Java function that executes arbitrary commands, leading to remote code execution (RCE). It automates the process of logging in, creating the malicious alias, and executing commands via SQL queries.

This Metasploit module exploits a feature in H2 Database's web interface to execute arbitrary Java code via the CREATE ALIAS function, leading to remote command execution. It uses a multi-step approach involving payload retrieval via curl and execution on the target system.