Delete CVE-2019-11043.yaml
This is the incorrect way to test for this particular bug. The person who pointed this out has no desire to open a pull request. So we nuke this file.patch-1
parent
c5f68c887d
commit
5e844c925f
|
@ -1,20 +0,0 @@
|
|||
id: cve-2019-11043
|
||||
|
||||
info:
|
||||
name: PHP-FPM & nginx RCE
|
||||
author: geeknik
|
||||
severity: high
|
||||
description: Certain versions of PHP 7 running on NGINX with php-fpm enabled can be vulnerable to remote code execution.
|
||||
reference: https://github.com/neex/phuip-fpizdam
|
||||
# This tempalte needs to reworked, WIP.
|
||||
|
||||
requests:
|
||||
- method: GET
|
||||
path:
|
||||
- "{{BaseURL}}/?a=/bin/sh+-c+'which+which'&"
|
||||
|
||||
matchers:
|
||||
- type: word
|
||||
words:
|
||||
- "/bin/which"
|
||||
part: body
|
Loading…
Reference in New Issue