mirror of
https://github.com/projectdiscovery/nuclei-templates.git
synced 2026-02-04 17:53:27 +08:00
c41f64987b
Solves this false positive (different encoding) nuclei -debug -t nuclei-templates/vulnerabilities/wordpress/wordpress-db-repair.yaml -u https://try.walmart.com <p><code>define('WP_ALLOW_REPAIR', true);
32 lines
584 B
YAML
32 lines
584 B
YAML
id: wordpress-db-repair
|
|
|
|
info:
|
|
name: Wordpress DB Repair Exposed
|
|
author: _C0wb0y_
|
|
severity: low
|
|
description: Discover enabled Wordpress repair page.
|
|
tags: wordpress,config,fpd
|
|
|
|
requests:
|
|
- method: GET
|
|
path:
|
|
- "{{BaseURL}}/wp-admin/maint/repair.php"
|
|
|
|
matchers-condition: and
|
|
matchers:
|
|
- type: word
|
|
words:
|
|
- "<title>WordPress"
|
|
|
|
- type: status
|
|
status:
|
|
- 200
|
|
|
|
- type: word
|
|
words:
|
|
- "define"
|
|
- "WP_ALLOW_REPAIR"
|
|
- "true"
|
|
condition: and
|
|
negative: true
|