Create open-web-analytics-installer.yaml

patch-11
Dhiyaneshwaran 2024-09-17 11:05:07 +05:30 committed by GitHub
parent a6f17700db
commit 41a4f9e6cd
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 29 additions and 0 deletions

View File

@ -0,0 +1,29 @@
id: open-web-analytics-installer
info:
name: Open Web Analytics Installer - Exposure
author: DhiyaneshDK
severity: high
description:
Open Web Analytics is susceptible to the Installation page exposure due to misconfiguration.
metadata:
verified: true
max-request: 1
shodan-query: html:"OWA CONFIG SETTINGS"
tags: misconfig,open-web-analytics,install,exposure
http:
- method: GET
path:
- '{{BaseURL}}/install.php'
matchers-condition: and
matchers:
- type: word
part: body
words:
- 'Installation - Open Web Analytics'
- type: status
status:
- 200