nuclei-templates/http/misconfiguration/thinkphp-errors.yaml

53 lines
1.3 KiB
YAML
Raw Normal View History

2023-04-18 08:06:55 +00:00
id: thinkphp-errors
info:
2023-04-19 17:44:31 +00:00
name: ThinkPHP Errors - Sensitive Information Exposure
2023-04-18 08:06:55 +00:00
author: j4vaovo
severity: medium
2024-01-03 06:08:41 +00:00
description: ThinkPHP error is leaking sensitive info.
2024-09-10 09:08:16 +00:00
classification:
cpe: cpe:2.3:a:thinkphp:thinkphp:*:*:*:*:*:*:*:*
2023-04-18 08:06:55 +00:00
metadata:
2023-06-04 08:13:42 +00:00
verified: true
2023-10-14 11:27:55 +00:00
max-request: 1
2024-09-10 08:22:50 +00:00
vendor: thinkphp
2024-09-10 09:08:16 +00:00
product: thinkphp
fofa-query: app="ThinkPHP" && title="System Error"
2023-04-19 17:44:31 +00:00
tags: thinkphp,misconfig,exposure
2023-04-18 08:06:55 +00:00
http:
2023-04-18 08:06:55 +00:00
- method: GET
path:
2023-04-18 08:20:14 +00:00
- "{{BaseURL}}"
2023-04-18 08:06:55 +00:00
matchers-condition: and
matchers:
- type: word
part: body
words:
2023-04-19 20:33:58 +00:00
- "_DATABASE</td>"
- "_USERNAME</td>"
- "_PASSWORD</td>"
condition: and
2023-04-18 08:06:55 +00:00
- type: word
part: body
words:
- "<title>系统发生错误</title>"
- "<title>System Error</title>"
condition: or
- type: word
part: body
words:
- "Exception"
- "REQUEST_TIME"
condition: and
- type: status
status:
- 200
- 500
- 404
condition: or
2024-09-12 05:14:01 +00:00
# digest: 490a004630440220157c691a9f801b6d7f6d41e34928ea78ab332f3f175f51993a4fb9508930665b0220525f3863f33d6bf95f856a306080eaba91fd763b945095ba9fa7346e3253aeb5:922c64590222798bb761d5b6d8e72950