Enhancement: fuzzing/wordpress-weak-credentials.yaml by mp

patch-1
MostInterestingBotInTheWorld 2022-05-19 14:37:46 -04:00
parent 8a64ef16e4
commit a1657bc2a1
1 changed files with 12 additions and 2 deletions

View File

@ -1,9 +1,17 @@
id: wordpress-weak-credentials
info:
name: WordPress Weak Credentials
name: WordPress - Weak Credentials
author: evolutionsec
description: A WordPress passwords file was discovered.
reference:
- https://www.wpwhitesecurity.com/strong-wordpress-passwords-wpscan/
severity: critical
classification:
cvss-metrics: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N
cvss-score: 5.8
cve-id:
cwe-id: CWE-522
tags: wordpress,default-login,fuzz
requests:
@ -34,4 +42,6 @@ requests:
- '/wp-admin'
- 'wordpress_logged_in'
condition: and
part: header
part: header
# Enhanced by mp on 2022/05/19