Enhancement: vulnerabilities/other/maccmsv10-backdoor.yaml by mp

patch-1
MostInterestingBotInTheWorld 2022-05-30 09:48:06 -04:00
parent a604bfaa3d
commit 5cee74ec5c
1 changed files with 6 additions and 2 deletions

View File

@ -1,10 +1,12 @@
id: maccmsv10-backdoor
info:
name: Maccmsv10 Backdoor
name: Maccmsv10 - Backdoor Detection
author: princechaddha
severity: critical
description: A backdoor has been found in Maccmsv10, the backdoor is accessible via the '/index.php/bbs/index/download' endpoint and the special 'getpwd' parameter value of 'WorldFilledWithLove'.
description: Maccmsv10 contains a backdoor which can be exploited by remote attackers. The backdoor is accessible via the '/index.php/bbs/index/download' endpoint and the special 'getpwd' parameter value of 'WorldFilledWithLove'.
reference:
- https://github.com/chaitin/xray/blob/master/pocs/maccmsv10-backdoor.yml
tags: maccmsv10,rce
requests:
@ -27,3 +29,5 @@ requests:
- type: status
status:
- 200
# Enhanced by mp on 2022/05/30