Web Editor Check - Detect

ID: webeditors-check-detect

Severity: info

Author: princechaddha,bernardofsr,gy741

Tags: panel,webeditors,ckeditor

Description

Multiple web editor checks were detected.

YAML Source

id: webeditors-check-detect

info:
  name: Web Editor Check - Detect
  author: princechaddha,bernardofsr,gy741
  severity: info
  description: Multiple web editor checks were detected.
  classification:
    cvss-metrics: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N
    cwe-id: CWE-200
    cpe: cpe:2.3:a:ckeditor:ckeditor:*:*:*:*:drupal:*:*:*
  metadata:
    max-request: 17
    vendor: ckeditor
    product: ckeditor
    shodan-query: cpe:"cpe:2.3:a:ckeditor:ckeditor"
  tags: panel,webeditors,ckeditor

http:
  - method: GET
    path:
      - "{{BaseURL}}{{paths}}"
    payloads:
      paths:
        - "/fckeditor/_samples/default.html"
        - "/fckeditor/editor/filemanager/connectors/uploadtest.html"
        - "/ckeditor/samples/"
        - "/editor/ckeditor/samples/"
        - "/ckeditor/samples/sample_posteddata.php"
        - "/editor/ckeditor/samples/sample_posteddata.php"
        - "/fck/editor/dialog/fck_spellerpages/spellerpages/server-scripts/spellchecker.php"
        - "/fckeditor/editor/dialog/fck_spellerpages/spellerpages/server-scripts/spellcheckder.php"
        - "/plugin/editor/smarteditor2/SmartEditor2Skin.html"
        - "/js/se2/SmartEditor2.html"
        - "/nse/SmartEditor2.html"
        - "/SmartEditor2.html"
        - "/apps/ckeditor/samples/old/replacebyclass.html"
        - "/plugin/editor/ckeditor/samples/old/replacebyclass.html"
        - "/latest/samples/old/replacebyclass.html"
        - "/Content/ckeditor/samples/old/replacebyclass.html"
        - "/ckeditor/samples/plugins/htmlwriter/outputhtml.html"

    matchers:
      - type: word
        words:
          - "<title>FCKeditor"
          - "<title>CKEditor Samples</title>"
          - "http://ckeditor.com</a>"
          - "Custom Uploader URL:"
          - "init_spell()"
          - "'tip':'"
          - ":: Smart Editor 2"
          - "Replace Textareas by Class Name"
          - "CKEditor - The text editor for the Internet"
        condition: or
# digest: 490a0046304402207dad0af4b83a33ddeddf396fd11a5200cea7f58c3130fc2664f5538657c1fbaf02200ff640f9b411a8cb4c049e44779007fccde327aa905af3ac0883d80ca39293d4:922c64590222798bb761d5b6d8e72950

Guide to check the vulnerabilities

This template is used to detect vulnerabilities in web applications. It can be used with the Nuclei tool to scan for specific patterns or behaviors.

$ nuclei -u "URL" -t "http/exposed-panels/webeditors-check-detect.yaml"

View on Github