2021-05-23 12:30:46 +00:00
|
|
|
id: phppgadmin-panel
|
2022-04-22 10:38:41 +00:00
|
|
|
|
2021-05-23 12:30:46 +00:00
|
|
|
info:
|
|
|
|
name: phpPgAdmin Panel
|
2022-08-16 19:27:16 +00:00
|
|
|
author: Ganofins,Nullfuzz
|
2021-05-23 12:30:46 +00:00
|
|
|
severity: info
|
2022-08-16 19:27:16 +00:00
|
|
|
description: |
|
|
|
|
phpPgAdmin is a third-party tool that you can use to manipulate PostgreSQL databases.
|
2022-04-22 10:38:41 +00:00
|
|
|
reference:
|
|
|
|
- https://docs.cpanel.net/cpanel/databases/phppgadmin/
|
2022-08-16 17:22:07 +00:00
|
|
|
metadata:
|
2022-08-16 19:27:16 +00:00
|
|
|
verified: true
|
2022-08-16 17:22:07 +00:00
|
|
|
shodan-query: http.title:phpPgAdmin
|
2022-04-22 10:38:41 +00:00
|
|
|
tags: panel,phppgadmin
|
|
|
|
|
2021-05-23 12:30:46 +00:00
|
|
|
requests:
|
|
|
|
- method: GET
|
|
|
|
path:
|
2022-08-16 17:22:07 +00:00
|
|
|
- "{{BaseURL}}"
|
2022-08-16 19:27:16 +00:00
|
|
|
- "{{BaseURL}}/phppgadmin/"
|
|
|
|
|
|
|
|
matchers-condition: or
|
2021-05-23 12:30:46 +00:00
|
|
|
matchers:
|
2022-08-16 19:27:16 +00:00
|
|
|
- type: dsl
|
|
|
|
dsl:
|
2022-08-20 09:33:02 +00:00
|
|
|
- "status_code == 200"
|
2022-08-16 19:27:16 +00:00
|
|
|
- "contains(body, 'intro.php') && contains(body, 'browser.php')"
|
|
|
|
condition: and
|
|
|
|
|
|
|
|
- type: dsl
|
|
|
|
dsl:
|
2022-08-20 09:33:02 +00:00
|
|
|
- "status_code == 200"
|
2022-08-16 19:27:16 +00:00
|
|
|
- "contains(body, '<title>phpPgAdmin')"
|
2021-05-23 20:04:40 +00:00
|
|
|
condition: and
|