mirror of
https://github.com/projectdiscovery/nuclei-templates.git
synced 2026-01-31 15:53:33 +08:00
Added WordPress wp-links-opml.php - Version Disclosure
This commit is contained in:
50
http/exposures/files/wp-links-opml.yaml
Normal file
50
http/exposures/files/wp-links-opml.yaml
Normal file
@@ -0,0 +1,50 @@
|
||||
id: wp-links-opml
|
||||
|
||||
info:
|
||||
name: WordPress wp-links-opml.php - Version Disclosure
|
||||
author: princechaddha
|
||||
severity: info
|
||||
description: |
|
||||
WordPress wp-links-opml.php file is publicly accessible and exposes the WordPress version in the generator tag.
|
||||
reference:
|
||||
- https://www.acunetix.com/vulnerabilities/web/wordpress-version-disclosed/
|
||||
- https://wordpress.org/
|
||||
classification:
|
||||
cpe: cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
verified: true
|
||||
max-request: 1
|
||||
vendor: wordpress
|
||||
product: wordpress
|
||||
shodan-query:
|
||||
- http.component:"wordpress"
|
||||
- cpe:"cpe:2.3:a:wordpress:wordpress"
|
||||
tags: exposure,wordpress,wp,version,files
|
||||
|
||||
http:
|
||||
- method: GET
|
||||
path:
|
||||
- "{{BaseURL}}/wp-links-opml.php"
|
||||
|
||||
matchers-condition: and
|
||||
matchers:
|
||||
- type: word
|
||||
part: body
|
||||
words:
|
||||
- "<generator>https://wordpress.org/?v="
|
||||
|
||||
- type: word
|
||||
part: header
|
||||
words:
|
||||
- "text/xml"
|
||||
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
|
||||
extractors:
|
||||
- type: regex
|
||||
name: version
|
||||
group: 1
|
||||
regex:
|
||||
- '<generator>https://wordpress\.org/\?v=([0-9.]+)</generator>'
|
||||
Reference in New Issue
Block a user