nuclei-templates/http/misconfiguration/installer/blesta-installer.yaml

38 lines
919 B
YAML

id: blesta-installer
info:
name: Blesta Installer Exposure
description: Blesta is susceptible to the Installation page exposure due to misconfiguration.
author: DhiyaneshDk
severity: high
metadata:
verified: true
max-request: 1
shodan-query: html:"Blesta installer"
tags: misconfig,blesta,install,exposure
http:
- method: GET
path:
- '{{BaseURL}}/index.php/install'
matchers-condition: and
matchers:
- type: word
part: body
words:
- 'Blesta Installer'
- 'Install via Web Browser'
condition: and
- type: word
part: header
words:
- 'text/html'
- type: status
status:
- 200
# digest: 490a0046304402201d641af2264e089831272adfeea499fbf73c6ba70b8907663632d40cbee7f7d20220461c9d4e4281376ed10fca79721e39e29bb7d784003a74a40c31b0e7f775a725:922c64590222798bb761d5b6d8e72950