Enhancement: cnvd/2019/CNVD-2019-19299.yaml by mp

patch-1
MostInterestingBotInTheWorld 2022-05-12 10:26:10 -04:00
parent 9c32a74548
commit 9286957dee
1 changed files with 9 additions and 1 deletions

View File

@ -1,12 +1,18 @@
id: CNVD-2019-19299 id: CNVD-2019-19299
info: info:
name: Zhiyuan A8 Arbitrary File Write (RCE) name: Zhiyuan A8 - Remote Code Execution
author: daffainfo author: daffainfo
severity: critical severity: critical
description: Zhiyuan A8 is susceptible to remote code execution because of an arbitrary file write issue.
reference: reference:
- https://www.cxyzjd.com/article/guangying177/110177339 - https://www.cxyzjd.com/article/guangying177/110177339
- https://github.com/sectestt/CNVD-2019-19299 - https://github.com/sectestt/CNVD-2019-19299
classification:
cvss-metrics: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
cvss-score: 10.0
cve-id:
cwe-id: CWE-77
tags: zhiyuan,cnvd,cnvd2019,rce tags: zhiyuan,cnvd,cnvd2019,rce
requests: requests:
@ -45,3 +51,5 @@ requests:
- 'contains(body_1, "htmoffice operate")' - 'contains(body_1, "htmoffice operate")'
- 'contains(body_2, "Windows IP")' - 'contains(body_2, "Windows IP")'
condition: and condition: and
# Enhanced by mp on 2022/05/12