daffainfo
/
nuclei-templates
mirror of https://github.com/daffainfo/nuclei-templates.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Update php-zerodium-backdoor-rce.yaml

patch-1
Prince Chaddha 2022-05-31 14:48:05 +05:30 committed by GitHub
parent 927b557f16
commit 630a29f710
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 4 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
vulnerabilities/other/php-zerodium-backdoor-rce.yaml
View File

@ -4,7 +4,8 @@ info:
name: PHP 8.1.0-dev - Backdoor Remote Code Execution name: PHP 8.1.0-dev - Backdoor Remote Code Execution
author: dhiyaneshDk author: dhiyaneshDk
severity: critical severity: critical
description: PHP 8.1.0-dev contains a backdoor dubbed 'zerodiumvar_dump' which can allow the execution of arbitrary PHP code. description: |
PHP 8.1.0-dev contains a backdoor dubbed 'zerodiumvar_dump' which can allow the execution of arbitrary PHP code.
reference: reference:
- https://news-web.php.net/php.internals/113838 - https://news-web.php.net/php.internals/113838
- https://flast101.github.io/php-8.1.0-dev-backdoor-rce/ - https://flast101.github.io/php-8.1.0-dev-backdoor-rce/
@ -13,7 +14,7 @@ info:
cvss-score: 10.0 cvss-score: 10.0
cve-id: cve-id:
cwe-id: CWE-77 cwe-id: CWE-77
tags: php,backdoor tags: php,backdoor,rce,zerodium
requests: requests:
- method: GET - method: GET
@ -27,8 +28,8 @@ requests:
matchers: matchers:
- type: word - type: word
part: body
words: words:
- "int(54289)" - "int(54289)"
part: body
# Enhanced by mp on 2022/05/30 # Enhanced by mp on 2022/05/30