nuclei-templates/cves/CVE-2018-6389.yaml

17 lines
320 B
YAML

id: CVE-2018-6389
info:
name: Wordpress Load Script
author: nadino
severity: low
requests:
- method: GET
path:
- "{{BaseURL}}/wp-admin/load-scripts.php?load="
matchers:
- type: dsl
dsl:
- 'contains(x_powered_by,"Engine")'
- 'contains(content_type,"javascript")'