id: unauthenticated-popup-upload info: name: Unauthenticated Popup File Upload - Detect author: DhiyaneshDk description: Endpoints where files can be uploaded without authentication were detected. severity: info reference: - https://www.exploit-db.com/ghdb/6671 classification: cvss-metrics: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N cvss-score: 0.0 cwe-id: CWE-200 tags: edb,fileupload metadata: max-request: 1 http: - method: GET path: - "{{BaseURL}}/RichWidgets/Popup_Upload.aspx" matchers-condition: and matchers: - type: word words: - "Popup Upload" part: body - type: status status: - 200 # Enhanced by md on 2022/10/31