Testing for remote code execution via OGNL injection