2020-05-14 17:54:02 +00:00
|
|
|
id: CVE-2018-6389
|
|
|
|
|
|
|
|
|
|
info:
|
|
|
|
|
name: Wordpress Load Script
|
|
|
|
|
author: nadino
|
2020-05-24 03:50:13 +00:00
|
|
|
severity: low
|
2020-05-14 17:54:02 +00:00
|
|
|
|
|
|
|
|
requests:
|
|
|
|
|
- method: GET
|
2020-05-25 07:49:06 +00:00
|
|
|
path:
|
2020-05-14 17:54:02 +00:00
|
|
|
- "{{BaseURL}}/wp-admin/load-scripts.php?load="
|
|
|
|
|
matchers:
|
|
|
|
|
- type: dsl
|
|
|
|
|
dsl:
|
2020-05-25 07:49:06 +00:00
|
|
|
- 'contains(x_powered_by,"Engine")'
|
|
|
|
|
- 'contains(content_type,"javascript")'
|
