From 067e84f4ba5478465e6df427dbb75cd8fdbb3a28 Mon Sep 17 00:00:00 2001 From: Dhiyaneshwaran Date: Mon, 29 Jul 2024 21:45:14 +0530 Subject: [PATCH 1/2] Create quickcms-installer.yaml --- .../installer/quickcms-installer.yaml | 34 +++++++++++++++++++ 1 file changed, 34 insertions(+) create mode 100644 http/misconfiguration/installer/quickcms-installer.yaml diff --git a/http/misconfiguration/installer/quickcms-installer.yaml b/http/misconfiguration/installer/quickcms-installer.yaml new file mode 100644 index 0000000000..dee1d42dd6 --- /dev/null +++ b/http/misconfiguration/installer/quickcms-installer.yaml @@ -0,0 +1,34 @@ +id: quickcms-installer + +info: + name: QuickCMS Installation Wizard + author: DhiyaneshDK + severity: high + description: | + PMM is susceptible to the Installation page exposure due to misconfiguration. + metadata: + verified: true + max-request: 1 + shodan-query: html:"QuickCMS Installation" + tags: misconfig,exposure,install,quickcms + +http: + - method: GET + path: + - "{{BaseURL}}/install/" + + matchers-condition: and + matchers: + - type: word + part: body + words: + - "QuickCMS Installation" + + - type: word + part: header + words: + - "text/html" + + - type: status + status: + - 200 From bd6fc6e48ba7503f3c170ca224687ebcc30e2692 Mon Sep 17 00:00:00 2001 From: Ritik Chaddha <44563978+ritikchaddha@users.noreply.github.com> Date: Tue, 30 Jul 2024 12:45:44 +0530 Subject: [PATCH 2/2] Update quickcms-installer.yaml --- http/misconfiguration/installer/quickcms-installer.yaml | 5 ----- 1 file changed, 5 deletions(-) diff --git a/http/misconfiguration/installer/quickcms-installer.yaml b/http/misconfiguration/installer/quickcms-installer.yaml index dee1d42dd6..995f6539d8 100644 --- a/http/misconfiguration/installer/quickcms-installer.yaml +++ b/http/misconfiguration/installer/quickcms-installer.yaml @@ -24,11 +24,6 @@ http: words: - "QuickCMS Installation" - - type: word - part: header - words: - - "text/html" - - type: status status: - 200