nuclei-templates/cnvd/2019/CNVD-2019-01348.yaml

id: CNVD-2019-01348

info:
  name: Xiuno BBS CNVD-2019-01348
  author: princechaddha
  severity: medium
  description: The Xiuno BBS system has a system reinstallation vulnerability. The vulnerability stems from the failure to protect or filter the installation directory after the system is installed. Attackers can directly reinstall the system through the installation page.
  reference: https://www.cnvd.org.cn/flaw/show/CNVD-2019-01348
  tags: xiuno,cnvd,cnvd2019

requests:
  - method: GET
    path:
      - "{{BaseURL}}/install/"
    headers:
      Accept-Encoding: deflate

    matchers-condition: and
    matchers:
      - type: status
        status:
          - 200

      - type: word
        part: body
        words:
          - "/view/js/xiuno.js"
          - "Choose Language (选择语言)"
        condition: and
moving files around 2021-06-03 16:24:08 +00:00			`id: CNVD-2019-01348`

Create xiuno-bbs-reinstallation.yaml 2021-04-23 13:10:17 +00:00			`info:`
Update xiuno-bbs-reinstallation.yaml 2021-04-23 13:11:15 +00:00			`name: Xiuno BBS CNVD-2019-01348`
Create xiuno-bbs-reinstallation.yaml 2021-04-23 13:10:17 +00:00			`author: princechaddha`
			`severity: medium`
			`description: The Xiuno BBS system has a system reinstallation vulnerability. The vulnerability stems from the failure to protect or filter the installation directory after the system is installed. Attackers can directly reinstall the system through the installation page.`
			`reference: https://www.cnvd.org.cn/flaw/show/CNVD-2019-01348`
Update CNVD-2019-01348.yaml 2022-01-04 06:18:14 +00:00			`tags: xiuno,cnvd,cnvd2019`
Create xiuno-bbs-reinstallation.yaml 2021-04-23 13:10:17 +00:00
			`requests:`
			`- method: GET`
			`path:`
			`- "{{BaseURL}}/install/"`
			`headers:`
			`Accept-Encoding: deflate`
Update and rename cnvd/CNVD-2019-01348.yaml to cnvd/2019/CNVD-2019-01348.yaml 2022-01-04 06:16:14 +00:00
Create xiuno-bbs-reinstallation.yaml 2021-04-23 13:10:17 +00:00			`matchers-condition: and`
			`matchers:`
			`- type: status`
			`status:`
			`- 200`
Update and rename cnvd/CNVD-2019-01348.yaml to cnvd/2019/CNVD-2019-01348.yaml 2022-01-04 06:16:14 +00:00
Create xiuno-bbs-reinstallation.yaml 2021-04-23 13:10:17 +00:00			`- type: word`
Update and rename cnvd/CNVD-2019-01348.yaml to cnvd/2019/CNVD-2019-01348.yaml 2022-01-04 06:16:14 +00:00			`part: body`
Create xiuno-bbs-reinstallation.yaml 2021-04-23 13:10:17 +00:00			`words:`
			`- "/view/js/xiuno.js"`
			`- "Choose Language (选择语言)"`
			`condition: and`