nuclei-templates/http/exposed-panels/oracle-business-control.yaml

41 lines
1.3 KiB
YAML
Raw Normal View History

2021-09-11 15:42:06 +00:00
id: oracle-business-control
info:
name: Oracle Commerce Business Control Center Login Panel - Detect
2024-05-29 17:56:37 +00:00
author: dhiyaneshDk,righettod
2021-09-11 15:42:06 +00:00
severity: info
description: Oracle Commerce Business Control Center login panel was detected.
2024-05-29 17:56:37 +00:00
reference:
- https://docs.oracle.com/cd/E23095_01/Platform.93/ATGBCCAdminGuide/html/s0101introductiontotheatgbusinesscont01.html
classification:
cvss-metrics: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N
cwe-id: CWE-200
cpe: cpe:2.3:a:oracle:commerce:*:*:*:*:*:*:*:*
2022-07-04 08:46:15 +00:00
metadata:
max-request: 1
product: commerce
2022-07-04 08:46:15 +00:00
shodan-query: http.title:"Oracle Commerce"
vendor: oracle
2021-09-12 15:58:44 +00:00
tags: oracle,login,panel
2021-09-11 15:42:06 +00:00
http:
2021-09-11 15:42:06 +00:00
- method: GET
path:
- '{{BaseURL}}/atg/bcc'
2024-05-29 17:56:37 +00:00
- '{{BaseURL}}/atg/user/html/login.jsp'
2024-05-29 18:04:14 +00:00
2024-05-29 17:56:37 +00:00
stop-at-first-match: true
2021-09-11 15:42:06 +00:00
matchers-condition: and
matchers:
- type: word
words:
- '<title>Oracle Commerce Business Control Center</title>'
2024-05-29 17:56:37 +00:00
- '/atg/userprofiling/InternalProfileFormHandler.loginSuccessURL'
- '/atg/userprofiling/InternalProfileFormHandler.loginErrorURL'
condition: or
2021-09-11 15:42:06 +00:00
- type: status
status:
- 200
# digest: 490a0046304402204c37db3664c3092a02d62e172d048d01d2ed6681c6ec1edc3ead1ded8e249a9a022042046755baf85576ddb93246b0bfdbe859eecdd41baf1926bb4c6d8b1d13b721:922c64590222798bb761d5b6d8e72950