Added PhpMyAdmin Server Import Misconfiguration Template

patch-1
Cristi Vlad 2021-10-15 21:29:59 +03:00
parent a5068ad95e
commit 7bbfd6f87b
1 changed files with 32 additions and 0 deletions

32
pma-server-import.yaml Normal file
View File

@ -0,0 +1,32 @@
id: pma-server-import
info:
name: PhpMyAdmin Server Import
author: Cristi vlad (@cristivlad25)
severity: high
description: Finds Unauthenticated PhpMyAdmin Server Import Pages.
references: none
requests:
- method: GET
path:
- "{{BaseURL}}/pma/server_import.php"
- "{{BaseURL}}/phpmyadmin/server_import.php"
- "{{BaseURL}}/phpMyAdmin 2/server_import.php"
- "{{BaseURL}}/db/server_import.php"
- "{{BaseURL}}server_import.php"
- "{{BaseURL}}/PMA/server_import.php"
- "{{BaseURL}}/admin/server_import.php"
- "{{BaseURL}}/admin/pma/server_import.php"
- "{{BaseURL}}/phpMyAdmin/server_import.php"
- "{{BaseURL}}/admin/phpMyAdmin/server_import.php"
stop-at-first-match: true
matchers-condition: and
matchers:
- type: word
words:
- "File to import"
- "Location of the text file"
- type: status
status:
- 200