References https://axis.apache.org/axis2/java/core/docs/webadminguide.html https://knowledge.broadcom.com/external/article/258506/default-password-apache-axis2.html https://github.com/0xmaximus/final_freaking_nuclei_templates/blob/main/axis2-default-password-2.yaml https://vulners.com/nuclei/NUCLEI:CVE-2010-0219 https://javaranch.com/journal/200709/web-services-authentication-axis2.html https://svn.apache.org/repos/asf/axis/axis2/java/core/tags/v1.1/xdocs/1_1/webadminguide.html https://pentest-tools.com/vulnerabilities-exploits/apache-axis2-default-credentials-http-active-check_11855 https://www.acunetix.com/vulnerabilities/web/apache-axis2-administration-console-weak-password/ https://knowledge.broadcom.com/external/article/13994/vulnerability-axis2-default-administrato.html https://github.com/cqr-cryeye-forks/goby-pocs/blob/main/Axis2-Default-Credentials-Remote-Code-Execution-(CVE-2010-0219).json https://www.kb.cert.org/vuls/id/989719 https://nvd.nist.gov/vuln/detail/cve-2010-0219 https://www.tenable.com/plugins/nessus/46740 https://medium.com/@domenicoveneziano/hidden-in-plain-sight-uncovering-rce-on-a-forgotten-axis2-instance-86ddc91f1415
Related VulnerabilitiesPoCCVE-2023-54391: Proxmox VE - Default Credentials with TFA BypassPoCjohnson-controls-default-login: Johnson Controls Frick Quantum HD Compressors - Default LoginFlowise /api/v1/loginmethod 未授权访问漏洞(CVE-2026-56270)PoClitellm-default-login: LiteLLM - Default LoginPoCnet-vision-default-login: Net Vision UPS Monitor - Default LoginPoC3xui-default-login: 3X-UI - Default LoginPoC泛微E-cology10 /papi/passport/appnew/login/appLogin 未授权访问漏洞WordPress /wp-login.php 跨站脚本攻击漏洞(CVE-2026-64638)Microsoft SharePoint Server /_trust/default.aspx 代码执行漏洞(CVE-2026-50522)ZKTeco BioTime 平台 /accounts/login 默认口令漏洞PoCCVE-2026-44825: Apache Solr 9.4.0-9.10.1 / 10.0.0 - Hardcoded Default CredentialsPoCCVE-2026-52824: Kimai <= 2.57.0 - Default APP_SECRET Authentication BypassPoCsentinel-default-login: Alibaba Sentinel - Default Login