daffainfo
/
nuclei-templates
mirror of https://github.com/daffainfo/nuclei-templates.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

updated matchers

patch-12
Ritik Chaddha 2024-10-04 15:33:07 +04:00 committed by GitHub
parent c190b6d42f
commit 7922934227
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 5 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
http/cves/2024/CVE-2024-8877.yaml
View File

@ -7,9 +7,9 @@ info:
description: | description: |
The three endpoints /cgi-bin/db_datalog_w.cgi, /cgi-bin/db_eventlog_w.cgi, and /cgi-bin/db_multimetr_w.cgi are vulnerable to SQL injection without prior authentication. This enables an attacker to modify the collected log data in an arbitrary way. The three endpoints /cgi-bin/db_datalog_w.cgi, /cgi-bin/db_eventlog_w.cgi, and /cgi-bin/db_multimetr_w.cgi are vulnerable to SQL injection without prior authentication. This enables an attacker to modify the collected log data in an arbitrary way.
reference: reference:
- https://cvefeed.io/vuln/detail/CVE-2024-8877
- https://cyberdanube.com/en/en-multiple-vulnerabilities-in-riello-netman-204/index.html - https://cyberdanube.com/en/en-multiple-vulnerabilities-in-riello-netman-204/index.html
- https://0day.today/exploit/39757 - https://0day.today/exploit/39757
- https://nvd.nist.gov/vuln/detail/CVE-2024-8877
classification: classification:
cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
cvss-score: 9.8 cvss-score: 9.8
@ -23,10 +23,10 @@ info:
max-request: 1 max-request: 1
vendor: riello-ups vendor: riello-ups
product: netman_204_firmware product: netman_204_firmware
shodan-query: http.title:"netman" shodan-query: title:"netman 204"
fofa-query: title="netman" fofa-query: title="netman 204"
censys-query: services.http.response.body:"netman204" censys-query: services.http.response.body:"netman204"
google-query: intitle:"netman" google-query: intitle:"netman 204"
tags: cve,cve2024,netman,sqli tags: cve,cve2024,netman,sqli
http: http:
@ -37,6 +37,6 @@ http:
matchers: matchers:
- type: dsl - type: dsl
dsl: dsl:
- 'contains_all(body,"START APPLICATION", "Info", "codeStr", "timedate")' - 'contains_all(body, "START APPLICATION", "category\":", "codeStr\":")'
- 'status_code == 200' - 'status_code == 200'
condition: and condition: and