Changes for page Engine_XalanJ

Summary

• Page properties (1 modified, 0 added, 0 removed)

Details

Page properties

Content

...	...	@@ -19,11 +19,12 @@
19	19
20	20	== Special features ==
21	21
22		-* File creation
23		-* Code execution
24		-* JDBC connectivity
25	25	* Java properties disclosure
26	26	* Java environment disclosure
	24	+* Java code execution
	25	+* Arbitrary command execution
	26	+* File creation
	27	+* JDBC connectivity
27	27
28	28	== Java properties disclosure ==
29	29
...	...	@@ -32,11 +32,9 @@
32	32	|=Namespace|=Function|=PoC|=Sample output
33	33	|http:~/~/www.w3.org/1999/XSL/Transform|system-property()|[[xalanj-java-properties.xsl>>attach:xalanj-java-properties.xsl]]|[[xalanj-java-properties-output.txt>>attach:xalanj-java-properties-output.txt]]
34	34
35		-
36		-
37	37	== Java environment disclosure ==
38	38
39		-The checkEnvironment() extension function (documented [[here>>http://xml.apache.org/xalan-j/faq.html#faq-N10064||rel="__blank"]]) will display some information about the execution context (packages, paths, versions, ...).
	38	+The checkEnvironment() extension function (documented [[here>>http://xml.apache.org/xalan-j/faq.html#faq-N10064||rel="__blank"]]) will display some information about the execution context (including available packages, paths, versions, ...).
40	40
41	41	|=Namespace|=Extension function|=PoC|=Sample output
42	42	|http:~/~/xml.apache.org/xalan|checkEnvironment()|[[xalanj-checkenv.xsl>>attach:xalanj-checkenv.xsl]]|[[xalanj-checkenv-output.txt>>attach:xalanj-checkenv-output.txt]]
...	...	@@ -45,7 +45,6 @@
45	45
46	46	The attached code will display the current date using a newly created "java.util.Date" object. This should be enough to demonstrate Java code execution.
47	47
48		-
49	49	|=Namespace|=Extension function|=PoC|=Sample output
50	50	|http:~/~/xml.apache.org/xalan/java/java.util.Date|new()|[[xalanj-java-date.xsl>>attach:xalanj-java-date.xsl]]|Current date:
51	51	Wed Jan 11 22:45:07 CET 2012