nuclei-templates/vulnerabilities/wordpress/wp-upload-data.yaml

id: wordpress-upload-data

info:
  name: wordpress-upload-data
  author: pussycat0x
  severity: medium
  description: The remote WordPress installation contains a file 'data.txt' under the '/wp-content/uploads/' folder that has sensitive information inside it.
  reference: https://www.exploit-db.com/ghdb/7040
  tags: wordpress,listing

requests:
  - method: GET
    path:
      - "{{BaseURL}}/wp-content/uploads/data.txt"

    matchers-condition: and
    matchers:
      - type: word
        words:
          - "admin:"

      - type: word
        part: header
        words:
          - "text/plain"

      - type: status
        status:
          - 200
Add files via upload 2021-07-28 18:26:51 +00:00			`id: wordpress-upload-data`
refactor: Description field uniformization * info field reorder * reference values refactored to list * added new lines after the id and before the protocols * removed extra new lines * split really long descriptions to multiple lines (part 1) * other minor fixes 2022-04-22 10:38:41 +00:00
Add files via upload 2021-07-28 18:26:51 +00:00			`info:`
			`name: wordpress-upload-data`
			`author: pussycat0x`
			`severity: medium`
Better description 2021-10-26 09:35:56 +00:00			`description: The remote WordPress installation contains a file 'data.txt' under the '/wp-content/uploads/' folder that has sensitive information inside it.`
Add files via upload 2021-07-28 18:26:51 +00:00			`reference: https://www.exploit-db.com/ghdb/7040`
			`tags: wordpress,listing`
refactor: Description field uniformization * info field reorder * reference values refactored to list * added new lines after the id and before the protocols * removed extra new lines * split really long descriptions to multiple lines (part 1) * other minor fixes 2022-04-22 10:38:41 +00:00
Add files via upload 2021-07-28 18:26:51 +00:00			`requests:`
			`- method: GET`
			`path:`
			`- "{{BaseURL}}/wp-content/uploads/data.txt"`
Update wp-upload-data.yaml 2021-07-28 18:39:11 +00:00
Add files via upload 2021-07-28 18:26:51 +00:00			`matchers-condition: and`
			`matchers:`
			`- type: word`
			`words:`
Update wp-upload-data.yaml 2021-07-29 21:06:18 +00:00			`- "admin:"`
Update wp-upload-data.yaml 2021-07-28 18:39:11 +00:00
			`- type: word`
			`part: header`
			`words:`
Update wp-upload-data.yaml 2021-07-29 21:06:18 +00:00			`- "text/plain"`
Update wp-upload-data.yaml 2021-07-28 18:39:11 +00:00
Add files via upload 2021-07-28 18:26:51 +00:00			`- type: status`
			`status:`
Update wp-upload-data.yaml 2021-07-28 18:39:11 +00:00			`- 200`