From a1d3678a70cd0730854c1eaa0085e263ea4c7481 Mon Sep 17 00:00:00 2001 From: pussycat0x <65701233+pussycat0x@users.noreply.github.com> Date: Mon, 12 Jul 2021 23:24:24 +0530 Subject: [PATCH] Add files via upload --- .../wordpress/wp-plugin-lifterlms.yaml | 21 +++++++++++++++++++ 1 file changed, 21 insertions(+) create mode 100644 vulnerabilities/wordpress/wp-plugin-lifterlms.yaml diff --git a/vulnerabilities/wordpress/wp-plugin-lifterlms.yaml b/vulnerabilities/wordpress/wp-plugin-lifterlms.yaml new file mode 100644 index 0000000000..afc2113bd1 --- /dev/null +++ b/vulnerabilities/wordpress/wp-plugin-lifterlms.yaml @@ -0,0 +1,21 @@ +id: wordpress-plugins-lifterlms +info: + name: WordPress Plugin lifterlms + author: pussycat0x + severity: low + description: Searches for sensitive directories present in the wordpress-plugins plugin. + reference: https://www.exploit-db.com/ghdb/6420 + tags: wordpress,listing +requests: + - method: GET + path: + - "{{BaseURL}}/wp-content/plugins/lifterlms/" + matchers-condition: and + matchers: + - type: word + words: + - "Index of" + - "/wp-content/plugins/lifterlms/" + - type: status + status: + - 200 \ No newline at end of file