nuclei-templates/http/exposed-panels/odoo-database-manager.yaml

34 lines
867 B
YAML

id: odoo-database-manager
info:
name: Odoo - Database Manager Discovery
author: __Fazal,R3dg33k
severity: low
description: Odoo database manager was discovered.
classification:
cpe: cpe:2.3:a:odoo:odoo:*:*:*:*:*:*:*:*
metadata:
max-request: 1
product: odoo
shodan-query: title:"Odoo"
vendor: odoo
verified: true
tags: panel,odoo,backup
http:
- method: GET
path:
- '{{BaseURL}}/web/database/manager'
matchers-condition: and
matchers:
- type: word
words:
- "<title>Odoo</title>"
- ".o_database_delete"
condition: and
- type: status
status:
- 200
# digest: 4b0a00483046022100e6bfcf6be7e324d790d118befd34300f9cecb2bb8027cb02315f747da01ddd6f022100dd85c20ce487cb88934926744c137d63e3527f40c963b31a88c2399b245be995:922c64590222798bb761d5b6d8e72950