mirror of
https://github.com/projectdiscovery/nuclei-templates.git
synced 2026-02-03 17:23:30 +08:00
72 lines
2.1 KiB
YAML
72 lines
2.1 KiB
YAML
id: phpmyadmin-misconfiguration
|
|
|
|
info:
|
|
name: phpmyadmin Data Exposure
|
|
author: pussycat0x
|
|
severity: medium
|
|
description: |
|
|
An unauthenticated instance of phpmyadmin was discovered, which could be leveraged to access sensitive information.
|
|
reference:
|
|
- https://www.exploit-db.com/ghdb/6997
|
|
classification:
|
|
cvss-metrics: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
|
|
cvss-score: 5.3
|
|
cwe-id: CWE-200
|
|
metadata:
|
|
max-request: 2
|
|
vendor: phpmyadmin
|
|
product: phpmyadmin
|
|
shodan-query:
|
|
- "http.title:phpMyAdmin"
|
|
- http.title:"phpmyadmin"
|
|
- http.component:"phpmyadmin"
|
|
- cpe:"cpe:2.3:a:phpmyadmin:phpmyadmin"
|
|
fofa-query:
|
|
- body="pma_servername" && body="4.8.4"
|
|
- title="phpmyadmin"
|
|
tags: phpmyadmin,misconfig,edb
|
|
|
|
|
|
flow: http(1) || http(2)
|
|
|
|
http:
|
|
- method: GET
|
|
path:
|
|
- "{{BaseURL}}/phpmyadmin/index.php?db=information_schema"
|
|
|
|
matchers-condition: and
|
|
matchers:
|
|
- type: dsl
|
|
dsl:
|
|
- status_code == 200
|
|
- regex("var\\s+db\\s*=\\s*\'information_schema\'",body)
|
|
- regex("var\\s+opendb_url\\s*=\\s*\'db_structure\\.php\'",body)
|
|
condition: and
|
|
|
|
- type: dsl
|
|
dsl:
|
|
- 'contains(body, "name=\\\"login_form\\\"")'
|
|
- 'contains(body, "id=\\\"input_username\\\"")'
|
|
condition: and
|
|
negative: true
|
|
|
|
- method: GET
|
|
path:
|
|
- "{{BaseURL}}/phpMyAdmin/index.php?db=information_schema"
|
|
|
|
matchers-condition: and
|
|
matchers:
|
|
- type: dsl
|
|
dsl:
|
|
- status_code == 200
|
|
- regex("var\\s+db\\s*=\\s*\'information_schema\'",body)
|
|
- regex("var\\s+opendb_url\\s*=\\s*\'db_structure\\.php\'",body)
|
|
condition: and
|
|
|
|
- type: dsl
|
|
dsl:
|
|
- 'contains(body, "name=\\\"login_form\\\"")'
|
|
- 'contains(body, "id=\\\"input_username\\\"")'
|
|
condition: and
|
|
negative: true
|
|
# digest: 490a00463044022100cb6bddaf8f1061635a13e15d6408a70cbc037e33ab40a7eb035a745db9b76d2a021f271a4cc896e259d4f5b098543763784ad31ff880193f78ce75727862aa295e:922c64590222798bb761d5b6d8e72950 |