Merge pull request #10766 from projectdiscovery/open-web-analytics-installer

Create open-web-analytics-installer.yaml
patch-11
Ritik Chaddha 2024-09-19 07:30:11 +04:00 committed by GitHub
commit 8a4e8e3c7d
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 29 additions and 0 deletions

View File

@ -0,0 +1,29 @@
id: open-web-analytics-installer
info:
name: Open Web Analytics Installer - Exposure
author: DhiyaneshDK
severity: high
description: |
Open Web Analytics is susceptible to the Installation page exposure due to misconfiguration.
metadata:
verified: true
max-request: 1
shodan-query: html:"OWA CONFIG SETTINGS"
tags: misconfig,open-web-analytics,install,exposure
http:
- method: GET
path:
- '{{BaseURL}}/install.php'
matchers-condition: and
matchers:
- type: word
part: body
words:
- 'Installation - Open Web Analytics'
- type: status
status:
- 200