Add CVE-2021-37704 template
parent
51b15ff0d4
commit
180219cc63
|
@ -0,0 +1,18 @@
|
||||||
|
id: CVE-2021-37704
|
||||||
|
|
||||||
|
info:
|
||||||
|
name: phpinfo() exposure in unprotected composer vendor folder via phpfastcache/phpfastcache.
|
||||||
|
author: whoever
|
||||||
|
severity: low
|
||||||
|
tags: cve,composer,phpinfo
|
||||||
|
|
||||||
|
requests:
|
||||||
|
- method: GET
|
||||||
|
path:
|
||||||
|
- "{{BaseURL}}/vendor/phpfastcache/phpfastcache/docs/examples/phpinfo.php"
|
||||||
|
matchers:
|
||||||
|
- type: word
|
||||||
|
words:
|
||||||
|
- "PHP Extension"
|
||||||
|
- "PHP Version"
|
||||||
|
condition: and
|
Loading…
Reference in New Issue