Changes for page Engine_XalanJ

Last modified by Nicolas Gregoire on 2012/01/31 17:35
From version Icon 37.1 Icon
edited by Nicolas Gregoire
on 2012/01/11 23:27
Change comment: There is no comment for this version
To version Icon 39.1 Icon
edited by Nicolas Gregoire
on 2012/01/11 23:28
Change comment: There is no comment for this version

Summary

Details

Icon Page properties
Content
... ... @@ -19,11 +19,12 @@
19 19  
20 20  == Special features ==
21 21  
22 -* File creation
23 -* Code execution
24 -* JDBC connectivity
25 25  * Java properties disclosure
26 26  * Java environment disclosure
24 +* Java code execution
25 +* Arbitrary command execution
26 +* File creation
27 +* JDBC connectivity
27 27  
28 28  == Java properties disclosure ==
29 29  
... ... @@ -32,11 +32,9 @@
32 32  |=Namespace|=Function|=PoC|=Sample output
33 33  |http:~/~/www.w3.org/1999/XSL/Transform|system-property()|[[xalanj-java-properties.xsl>>attach:xalanj-java-properties.xsl]]|[[xalanj-java-properties-output.txt>>attach:xalanj-java-properties-output.txt]]
34 34  
35 -
36 -
37 37  == Java environment disclosure ==
38 38  
39 -The checkEnvironment() extension function (documented [[here>>http://xml.apache.org/xalan-j/faq.html#faq-N10064||rel="__blank"]]) will display some information about the execution context (packages, paths, versions, ...).
38 +The checkEnvironment() extension function (documented [[here>>http://xml.apache.org/xalan-j/faq.html#faq-N10064||rel="__blank"]]) will display some information about the execution context (including available packages, paths, versions, ...).
40 40  
41 41  |=Namespace|=Extension function|=PoC|=Sample output
42 42  |http:~/~/xml.apache.org/xalan|checkEnvironment()|[[xalanj-checkenv.xsl>>attach:xalanj-checkenv.xsl]]|[[xalanj-checkenv-output.txt>>attach:xalanj-checkenv-output.txt]]