daffainfo
/
nuclei-templates
mirror of https://github.com/daffainfo/nuclei-templates.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Update pre-auth-rce-gocd.yaml

patch-1
Dhiyaneshwaran 2021-11-05 01:41:25 +05:30 committed by GitHub
parent 3eff5e541d
commit 0ac7e92ac9
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 0 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
misconfiguration/pre-auth-rce-gocd.yaml
View File

@ -6,7 +6,6 @@ info:
severity: critical severity: critical
reference: https://twitter.com/wvuuuuuuuuuuuuu/status/1456316586831323140 reference: https://twitter.com/wvuuuuuuuuuuuuu/status/1456316586831323140
tags: go,rce,intrusive tags: go,rce,intrusive
description: "An issue was discovered in rConfig 3.9.2. An attacker can directly execute system commands by sending a GET request to ajaxServerSettingsChk.php because the rootUname parameter is passed to the exec function without filtering, which can lead to command execution."
requests: requests:
- method: GET - method: GET