17 lines
318 B
YAML
17 lines
318 B
YAML
|
id: CVE-2018-6389
|
||
|
|
||
|
info:
|
||
|
name: Wordpress Load Script
|
||
|
author: nadino
|
||
|
severity: high
|
||
|
|
||
|
requests:
|
||
|
- method: GET
|
||
|
path:
|
||
|
- "{{BaseURL}}/wp-admin/load-scripts.php?load="
|
||
|
matchers:
|
||
|
- type: dsl
|
||
|
dsl:
|
||
|
- 'contains(x_powered_by,"Engine")'
|
||
|
- 'contains(content_type,"javascript")'
|