2024-09-02 02:54:19 +00:00
id : apache-jspwiki-ip-userenum
2024-08-31 11:34:27 +00:00
info :
2024-09-09 17:25:57 +00:00
name : Apache JSPWiki - User IP Enumeration
2024-08-31 11:34:27 +00:00
author : icarot
2024-09-02 02:54:19 +00:00
severity : low
2024-08-31 11:34:27 +00:00
description : |
Enumerates the IP Address and users that is currently accessing an Apache JSPWiki web application, leading open source WikiWiki engine, feature-rich and built around standard JEE components (Java, servlets, JSP).
classification :
cpe : cpe:2.3:a:apache:jspwiki:*:*:*:*:*:*:*:*
metadata :
max-request : 1
2024-09-09 17:25:57 +00:00
verified : true
2024-08-31 11:34:27 +00:00
vendor : apache
product : jspwiki
2024-09-09 17:25:57 +00:00
tags : jspwiki,apache,enumeration
2024-08-31 11:34:27 +00:00
http :
- method : GET
path :
- "{{BaseURL}}/Wiki.jsp?page=SystemInfo"
matchers-condition : and
matchers :
- type : word
2024-09-09 17:25:57 +00:00
part : body
2024-08-31 11:34:27 +00:00
words :
- '<b>Active Wiki Users</b>'
2024-09-09 17:25:57 +00:00
- 'Number of active sessions'
2024-08-31 11:34:27 +00:00
condition : and
2024-09-09 17:25:57 +00:00
2024-08-31 11:34:27 +00:00
- type : status
status :
- 200
2024-09-10 06:21:33 +00:00
# digest: 490a0046304402202ec08bfb8298012da6c27165085f7c4bab810bab42aa40ec63fed07dd5fb8d36022056c584edb9a5fde0ee4122175123b70a4519e5995ceb61a4964048f69a4a328c:922c64590222798bb761d5b6d8e72950