Merge pull request #10148 from projectdiscovery/piwigo-installer

Create piwigo-installer.yaml
patch-4
Ritik Chaddha 2024-06-29 17:00:04 +05:30 committed by GitHub
commit 3b19eed69c
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 29 additions and 0 deletions

View File

@ -0,0 +1,29 @@
id: piwigo-installer
info:
name: Piwigo Installation Page - Exposure
author: DhiyaneshDK
severity: high
description: |
Piwigo is susceptible to the Installation page exposure due to misconfiguration.
metadata:
verified: true
max-request: 1
shodan-query: html:"Piwigo" html:"- Installation"
tags: misconfig,exposure,install,piwigo
http:
- method: GET
path:
- "{{BaseURL}}/install.php"
matchers-condition: and
matchers:
- type: regex
part: body
regex:
- 'Piwigo ([0-9.]+) \- Installation'
- type: status
status:
- 200