39 lines
864 B
YAML
39 lines
864 B
YAML
id: wp-haberadam-idor
|
|||
|
|||
info:
|
|||
|
|
name: WordPress Themes Haberadam JSON API - IDOR and Path Disclosure
|
||
author: pussycat0x
|
|||
severity: low
|
|||
reference:
|
|||
- https://cxsecurity.com/issue/WLB-2021090078
|
|||
metadata:
|
|||
google-query: inurl:/wp-content/themes/haberadam/
|
|||
tags: wordpress,idor,wp-theme,disclosure
|
|||
|
|||
http:
|
|||
- method: GET
|
|||
path:
|
|||
- '{{BaseURL}}/wp-content/themes/haberadam/api/mobile-info.php?id='
|
|||
- '{{BaseURL}}/blog/wp-content/themes/haberadam/api/mobile-info.php?id='
|
|||
|
|||
stop-at-first-match: true
|
|||
matchers-condition: and
|
|||
matchers:
|
|||
- type: word
|
|||
part: body
|
|||
words:
|
|||
- '"status"'
|
|||
- '"hava"'
|
|||
- '"degree"'
|
|||
- '"icon"'
|
|||
condition: and
|
|||
|
|||
- type: status
|
|||
status:
|
|||
- 200
|
|||
|
|||
- type: word
|
|||
part: header
|
|||
words:
|
|||
- text/html
|
