Update oa-tongda-path-traversal.yaml
parent
683b511766
commit
c4aec5a0d1
|
@ -4,7 +4,8 @@ info:
|
|||
name: Office Anywhere TongDa - Path Traversal
|
||||
author: pikpikcu
|
||||
severity: critical
|
||||
description: Office Anywhere (OA) is susceptible to path traversal vulnerabilities which can be leveraged to perform remote code execution.
|
||||
description: |
|
||||
Office Anywhere (OA) is susceptible to path traversal vulnerabilities which can be leveraged to perform remote code execution.
|
||||
reference:
|
||||
- https://github.com/jas502n/OA-tongda-RCE
|
||||
classification:
|
||||
|
@ -25,17 +26,19 @@ requests:
|
|||
|
||||
matchers-condition: and
|
||||
matchers:
|
||||
|
||||
- type: word
|
||||
words:
|
||||
- "text/html"
|
||||
part: header
|
||||
condition: and
|
||||
- type: word
|
||||
part: body
|
||||
words:
|
||||
- "[mysql]"
|
||||
- "password="
|
||||
part: body
|
||||
condition: and
|
||||
|
||||
- type: word
|
||||
part: header
|
||||
words:
|
||||
- "text/html"
|
||||
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
|
|
Loading…
Reference in New Issue