From c3afc5055199adf34c67e78ddda9c5c1d75676d1 Mon Sep 17 00:00:00 2001
From: Ritik Chaddha <44563978+ritikchaddha@users.noreply.github.com>
Date: Tue, 30 Apr 2024 14:44:47 +0530
Subject: [PATCH] Create eyoucms-installer.yaml

---
 .../installer/eyoucms-installer.yaml          | 32 +++++++++++++++++++
 1 file changed, 32 insertions(+)
 create mode 100644 http/misconfiguration/installer/eyoucms-installer.yaml

diff --git a/http/misconfiguration/installer/eyoucms-installer.yaml b/http/misconfiguration/installer/eyoucms-installer.yaml
new file mode 100644
index 0000000000..10a87d98df
--- /dev/null
+++ b/http/misconfiguration/installer/eyoucms-installer.yaml
@@ -0,0 +1,32 @@
+id: eyoucms-installer
+
+info:
+  name: EyouCMS - Installation
+  author: ritikchaddha
+  severity: high
+  description: EyouCMS installation is exposed.
+  metadata:
+    verified: true
+    max-request: 1
+    fofa-query: title="eyoucms"
+  tags: misconfig,eyoucms,install
+
+http:
+  - method: GET
+    path:
+      - "{{BaseURL}}/install/index.php"
+
+    matchers-condition: and
+    matchers:
+      - type: word
+        part: body
+        words:
+          - "EyouCms"
+          - "/install/index.php?step=2"
+          - "使用协议</p>"
+        condition: and
+        case-insensitive: true
+
+      - type: status
+        status:
+          - 200