Update php-zerodium-backdoor-rce.yaml

patch-1
Prince Chaddha 2022-05-31 14:48:05 +05:30 committed by GitHub
parent 927b557f16
commit 630a29f710
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 4 additions and 3 deletions

View File

@ -4,7 +4,8 @@ info:
name: PHP 8.1.0-dev - Backdoor Remote Code Execution
author: dhiyaneshDk
severity: critical
description: PHP 8.1.0-dev contains a backdoor dubbed 'zerodiumvar_dump' which can allow the execution of arbitrary PHP code.
description: |
PHP 8.1.0-dev contains a backdoor dubbed 'zerodiumvar_dump' which can allow the execution of arbitrary PHP code.
reference:
- https://news-web.php.net/php.internals/113838
- https://flast101.github.io/php-8.1.0-dev-backdoor-rce/
@ -13,7 +14,7 @@ info:
cvss-score: 10.0
cve-id:
cwe-id: CWE-77
tags: php,backdoor
tags: php,backdoor,rce,zerodium
requests:
- method: GET
@ -27,8 +28,8 @@ requests:
matchers:
- type: word
part: body
words:
- "int(54289)"
part: body
# Enhanced by mp on 2022/05/30