rapid7/metasploit-framework — pull request #787 by jvazquez-r7 (2012-09-14 14:56:36+00:00)
Title: Added module for osvdb 85087

In order to execute remote code two techniques are provided. If the Oracle app has been deployed in the same WebLogic Samples Domain a JSP can be uploaded to the web root. If a new Domain has been used to deploy the Oracle application, the Windows Management Instrumentation service can be used to execute arbitrary code. Both techniques has been successfully tested on Oracle BTM 12.1.0.7, Weblogic 12.1.1 and Windows 2003 SP2.