nuclei-templates/http/exposed-panels/craftcms-admin-panel.yaml

38 lines
1.1 KiB
YAML

id: craftcms-admin-panel
info:
name: Craft CMS Admin Login Panel - Detect
author: Supr4s
severity: info
description: Craft CMS admin login panel was detected.
classification:
cvss-metrics: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N
cwe-id: CWE-200
cpe: cpe:2.3:a:nystudio107:seomatic:*:*:*:*:craft_cms:*:*:*
metadata:
max-request: 1
vendor: nystudio107
product: seomatic
shodan-query:
- 'X-Powered-By: Craft CMS'
- "x-powered-by: craft cms"
- 'x-powered-by: craft cms html:"seomatic"'
tags: panel,craftcms,nystudio107
http:
- method: GET
path:
- '{{BaseURL}}/admin/login'
matchers-condition: or
matchers:
- type: word
part: body
words:
- 'title="Powered by Craft CMS"'
- type: word
part: body
words:
- '<a id=\"poweredby\" href=\"http:\/\/craftcms.com\/\"'
# digest: 4a0a00473045022100893065907e1cb1a1ccf649a11becbb04dd0e589a395f171524ccdb6927134bef022004cd10241d35269f5ff03280933eba8dcb4d1e4f1d9e197286da1aa51671df77:922c64590222798bb761d5b6d8e72950