Update CVE-2023-39677.yaml

patch-1
Dhiyaneshwaran 2023-09-11 12:27:02 +05:30 committed by GitHub
parent c36a419cac
commit d888ca0d4b
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 11 additions and 6 deletions

View File

@ -1,12 +1,17 @@
id: CVE-2023-39677
info:
name: PrestaShop MyPrestaModules PHPInfo
name: PrestaShop MyPrestaModules PHPInfo - Disclosure
author: meme-lord
severity: low
description: PrestaShop modules by MyPrestaModules expose PHPInfo
reference:
- https://blog.sorcery.ie/posts/myprestamodules_phpinfo/
tags: cve,cve2023,prestashop,phpinfo
metadata:
max-request: 1
shodan-query: http.component:"PrestaShop"
verified: "true"
tags: cve,cve2023,prestashop,phpinfo,disclosure
http:
- method: GET
@ -16,10 +21,6 @@ http:
matchers-condition: and
matchers:
- type: status
status:
- 200
- type: word
part: body
words:
@ -27,6 +28,10 @@ http:
- "PHP Version"
condition: and
- type: status
status:
- 200
extractors:
- type: regex
part: body