id: pgadmin-exposure
info:
name: PostgreSQL - pgAdmin Dasboard Exposure
author: princechaddha
severity: info
tags: unauth,pgadmin,postgres,panel
requests:
- method: GET
path:
- "{{BaseURL}}/browser/"
matchers-condition: and
matchers:
- type: status
status:
- 200
- type: word
words:
- "PGADMIN_LANGUAGE="
part: header
- "<title>pgAdmin"
part: body