ZZZCMS RCE is a false positive if we see phpinfo() without posting any data
parent
109a3790d1
commit
8e3d9c97ce
|
@ -23,6 +23,13 @@ info:
|
|||
tags: cve,cve2019,zzzcms,rce,edb
|
||||
|
||||
http:
|
||||
- method: POST
|
||||
path:
|
||||
- "{{BaseURL}}/search/"
|
||||
|
||||
headers:
|
||||
Content-Type: application/x-www-form-urlencoded
|
||||
|
||||
- method: POST
|
||||
path:
|
||||
- "{{BaseURL}}/search/"
|
||||
|
@ -36,7 +43,13 @@ http:
|
|||
matchers-condition: and
|
||||
matchers:
|
||||
- type: word
|
||||
part: body
|
||||
part: body_1
|
||||
words:
|
||||
- "phpinfo"
|
||||
negative: true
|
||||
|
||||
- type: word
|
||||
part: body_2
|
||||
words:
|
||||
- "phpinfo"
|
||||
- "PHP Version"
|
||||
|
|
Loading…
Reference in New Issue