nuclei-templates/http/misconfiguration/installer/prestashop-installer.yaml

42 lines
1.1 KiB
YAML
Raw Normal View History

id: prestashop-installer
info:
name: Prestashop Installer Exposure
author: tess
severity: high
2023-12-21 09:19:34 +00:00
description: Prestashop is susceptible to the Installation page exposure due to misconfiguration.
metadata:
verified: true
2023-10-14 11:27:55 +00:00
max-request: 1
shodan-query: title:"PrestaShop Installation Assistant"
2024-09-10 08:22:50 +00:00
product: prestashop
vendor: prestashop
tags: misconfig,prestashop,exposure,install
2024-09-10 08:22:50 +00:00
classification:
cpe: cpe:2.3:a:prestashop:prestashop:*:*:*:*:*:*:*:*
http:
- method: GET
path:
- '{{BaseURL}}/install/index.php'
matchers-condition: and
matchers:
- type: word
part: body
words:
- '<title>PrestaShop Installation Assistant</title>'
- '<li>System configuration</li>'
- '<li>Store installation</li>'
condition: and
- type: word
part: header
words:
- "text/html"
- type: status
status:
- 200
2024-09-10 08:22:50 +00:00
# digest: 4a0a00473045022100a30533126e8bda3720627039bfd0a31e2f2bbd17cc62c347b3ddbf8acbf870970220314eed5d5caf09735ef9d5d9c106f5311ffba5d158bc5777b5cd8bcd62903801:922c64590222798bb761d5b6d8e72950