CVE-2014-1202

The WSDL/WADL import functionality in SoapUI before 4.6.4 allows remote attackers to execute arbitrary Java code via a crafted request parameter in a WSDL file.

🔗 References (10)

• cve@mitrehttp://baraktawily.blogspot.com/2014/01/soapui-code-execution-vulnerability-cve.html
• cve@mitrehttp://packetstormsecurity.com/files/124773/SoapUI-Remote-Code-Execution.html
• cve@mitrehttp://www.exploit-db.com/exploits/30908
• cve@mitrehttp://www.youtube.com/watch?v=3lCLE64rsc0
• cve@mitrehttps://github.com/SmartBear/soapui/blob/master/RELEASENOTES.txt
• af854a3a-2127-422b-91ae-364da2661108http://baraktawily.blogspot.com/2014/01/soapui-code-execution-vulnerability-cve.html
• af854a3a-2127-422b-91ae-364da2661108http://packetstormsecurity.com/files/124773/SoapUI-Remote-Code-Execution.html
• af854a3a-2127-422b-91ae-364da2661108http://www.exploit-db.com/exploits/30908
• af854a3a-2127-422b-91ae-364da2661108http://www.youtube.com/watch?v=3lCLE64rsc0
• af854a3a-2127-422b-91ae-364da2661108https://github.com/SmartBear/soapui/blob/master/RELEASENOTES.txt