Testing for blind remote code execution via OGNL injection