Update CVE-2020-27191.yaml
parent
0b409c8156
commit
7cbf1b013e
|
@ -3,7 +3,7 @@ info:
|
|||
name: LionWiki 3.2.11 - LFI
|
||||
author: 0x_Akoko
|
||||
severity: high
|
||||
description: LionWiki before 3.2.12 allows an unauthenticated user to read files as the web server user via crafted string in the index.php f1 variable, aka Local File Inclusion. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.
|
||||
description: LionWiki before 3.2.12 allows an unauthenticated user to read files as the web server user via crafted string in the index.php f1 variable, aka Local File Inclusion.
|
||||
reference:
|
||||
- https://www.junebug.site/blog/cve-2020-27191-lionwiki-3-2-11-lfi
|
||||
- https://www.cvedetails.com/cve/CVE-2020-27191
|
||||
|
@ -12,7 +12,7 @@ info:
|
|||
cvss-score: 7.5
|
||||
cve-id: CVE-2020-27191
|
||||
cwe-id: CWE-22
|
||||
tags: cve,cve2020,lionwiki,lfi
|
||||
tags: cve,cve2020,lionwiki,lfi,oss
|
||||
|
||||
requests:
|
||||
- method: GET
|
||||
|
@ -21,10 +21,9 @@ requests:
|
|||
|
||||
matchers-condition: and
|
||||
matchers:
|
||||
|
||||
- type: regex
|
||||
regex:
|
||||
- "root:[x*]:0:0"
|
||||
- "root:[x*]:0:0:"
|
||||
|
||||
- type: status
|
||||
status:
|
||||
|
|
Loading…
Reference in New Issue