psiinon / bodgeit

The BodgeIt Store is a vulnerable web application which is currently aimed at people who are new to pen testing.
263 stars 195 forks source link

advanced.jsp gives an exception report upon loading #5

Open GoogleCodeExporter opened 9 years ago

GoogleCodeExporter commented 9 years ago
What steps will reproduce the problem?
1. go to bodgeit/advanced.jsp

What is the expected output? What do you see instead?

Not sure but I am guessing not what I get. 

backtrack 5r2

Please provide any additional information below.

When I load the advanced search I get this exception report. 

type Exception report

message

description The server encountered an internal error () that prevented it from 
fulfilling this request.

exception

org.apache.jasper.JasperException: Unable to compile class for JSP: 

An error occurred at line: 8 in the generated java file
Only a type can be imported. com.thebodgeitstore.util.AES resolves to a package

An error occurred at line: 48 in the jsp file: /advanced.jsp
AES cannot be resolved to a type
45:     String key = "";
46:     String[] params = {};
47:     if (request.getMethod().equals("POST")){
48:         AES enc = new AES();
49:         try {
50:             key = session.getAttribute("key").toString();
51:         } catch (Exception e){

Original issue reported on code.google.com by wbors...@gmail.com on 12 Oct 2012 at 1:50

GoogleCodeExporter commented 9 years ago
What servlet engine are you using?

And did you build bodgeit yourself, or are you using the war file?

Many thanks

Original comment by psii...@gmail.com on 1 Nov 2012 at 11:20

GoogleCodeExporter commented 9 years ago
I am using the OWASP vulnerable web app distro. I do not have that VM spun
up right now but will email you the version tomorrow.

Original comment by wbors...@gmail.com on 2 Nov 2012 at 1:16

GoogleCodeExporter commented 9 years ago
Thanks - I'm pulling the latest version of BWA down now and will see if thats, 
er, broken :)

Original comment by psii...@gmail.com on 2 Nov 2012 at 9:06

GoogleCodeExporter commented 9 years ago
:)

Original comment by wbors...@gmail.com on 2 Nov 2012 at 5:11

GoogleCodeExporter commented 9 years ago
The latest version works fine for me.

Can you have a look and see if its also ok for you?

Cheers,

Simon

Original comment by psii...@gmail.com on 9 Nov 2012 at 9:16