daffainfo
/
nuclei-templates
mirror of https://github.com/daffainfo/nuclei-templates.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
nuclei-templates/exposures/configs/cgi-printenv.yaml

30 lines
800 B
YAML
Raw Normal View History

Added CGI script environment variable (#3498)
2022-01-07 08:32:29 +00:00
id: cgi-printenv
info:
name: CGI script environment variable
refactor: Description field uniformization * info field reorder * reference values refactored to list * added new lines after the id and before the protocols * removed extra new lines * split really long descriptions to multiple lines (part 1) * other minor fixes
2022-04-22 10:38:41 +00:00
author: emadshanab
Added CGI script environment variable (#3498)
2022-01-07 08:32:29 +00:00
severity: medium
description: A test CGI (Common Gateway Interface) script was found on this server. The response page returned by this CGI script is leaking a list of server environment variables.
refactor: Description field uniformization * info field reorder * reference values refactored to list * added new lines after the id and before the protocols * removed extra new lines * split really long descriptions to multiple lines (part 1) * other minor fixes
2022-04-22 10:38:41 +00:00
reference:
- https://www.acunetix.com/vulnerabilities/web/test-cgi-script-leaking-environment-variables/
Added CGI script environment variable (#3498)
2022-01-07 08:32:29 +00:00
tags: exposure,generic,cgi
requests:
- method: GET
path:
- "{{BaseURL}}/cgi-bin/printenv.pl"
matchers-condition: and
matchers:
- type: word
words:
- 'MYSQL_HOME'
- 'OPENSSL_CONF'
- 'REMOTE_ADDR'
- 'SERVER_ADMIN'
- 'Environment Variables:'
condition: or
- type: status
status:
- 200