Enhancement: vulnerabilities/other/webui-rce.yaml by mp

patch-1
MostInterestingBotInTheWorld 2022-06-03 10:08:35 -04:00
parent d3453a66f1
commit e81a76d9ab
1 changed files with 10 additions and 3 deletions

View File

@ -1,12 +1,17 @@
id: webui-rce id: webui-rce
info: info:
name: WebUI 1.5b6 RCE name: WebUI 1.5b6 - Remote Code Execution
author: pikpikcu author: pikpikcu
severity: critical severity: critical
description: WebUI's 'mainfile.php' endpoint contain a vulnerability that allows remote attackers to cause it to execute arbitrary code via the 'Logon' parameter. description: WebUI 1.5b6 is vulnerable to remote code execution because the 'mainfile.php' endpoint allows remote attackersto execute arbitrary code via the 'Logon' parameter.
reference: reference:
- https://www.exploit-db.com/exploits/36821 - https://www.exploit-db.com/exploits/36821
classification:
cvss-metrics: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
cvss-score: 10.0
cve-id:
cwe-id: CWE-77
tags: webui,rce tags: webui,rce
requests: requests:
@ -23,4 +28,6 @@ requests:
- type: status - type: status
status: status:
- 200 - 200
# Enhanced by mp on 2022/06/03