Skip to content

Commit a722a25

Browse files
Add template: warehouse_cargo-1981e94e-f565-4e3d-9464-f7f2fc023341.yaml 🤖
1 parent 7bd5120 commit a722a25

1 file changed

Lines changed: 51 additions & 0 deletions

File tree

Lines changed: 51 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,51 @@
1+
id: warehouse_cargo-1981e94e-f565-4e3d-9464-f7f2fc023341
2+
3+
info:
4+
name: >
5+
Warehouse Cargo <= 2.7.0 - Authenticated (Subscriber+) Arbitrary File Upload
6+
author: topscoder
7+
severity: low
8+
description: >
9+
10+
reference:
11+
- https://github.com/topscoder/nuclei-wordfence-cve
12+
- https://www.wordfence.com/threat-intel/vulnerabilities/id/1981e94e-f565-4e3d-9464-f7f2fc023341?source=api-scan
13+
classification:
14+
cvss-metrics:
15+
cvss-score:
16+
cve-id:
17+
metadata:
18+
fofa-query: "wp-content/themes/warehouse-cargo/"
19+
google-query: inurl:"/wp-content/themes/warehouse-cargo/"
20+
shodan-query: 'http.html:"wp-content/themes/warehouse-cargo/"'
21+
tags: cve,wordpress,wp-theme,warehouse-cargo,low,candidate
22+
23+
http:
24+
- method: GET
25+
redirects: true
26+
max-redirects: 3
27+
path:
28+
- "{{BaseURL}}/wp-content/themes/warehouse-cargo/style.css"
29+
30+
extractors:
31+
- type: regex
32+
name: version
33+
part: body
34+
group: 1
35+
regex:
36+
- "(?mi)Version:\\s*([0-9.]+)"
37+
38+
matchers-condition: and
39+
matchers:
40+
- type: status
41+
status:
42+
- 200
43+
44+
- type: word
45+
words:
46+
- "warehouse-cargo"
47+
part: body
48+
49+
- type: dsl
50+
dsl:
51+
- compare_versions(version, '<= 2.7.0')

0 commit comments

Comments
 (0)