Skip to content

Monstra Installation Exposure

ID: monstra-installer

Severity: high

Author: ritikchaddha

Tags: misconfig,monstra,install

Monstra is susceptible to the Installation page exposure due to misconfiguration.

id: monstra-installer
info:
name: Monstra Installation Exposure
author: ritikchaddha
severity: high
description: Monstra is susceptible to the Installation page exposure due to misconfiguration.
classification:
cpe: cpe:2.3:a:monstra:monstra_cms:*:*:*:*:*:*:*:*
metadata:
verified: true
max-request: 1
vendor: monstra
product: monstra_cms
shodan-query: 'title:"Monstra :: Install"'
tags: misconfig,monstra,install
http:
- method: GET
path:
- "{{BaseURL}}"
matchers-condition: and
matchers:
- type: word
part: body
words:
- "Monstra :: Install"
- type: status
status:
- 200
# digest: 4a0a00473045022100c6985b0931ed0bc7003b99b504b21ace512b76546e8dcac8324d04de43a762a9022059a39b4da9f4345a0052fef3e91e64bb42ed39ee40f8c7b306669c26d2c0ddcd:922c64590222798bb761d5b6d8e72950

This template is used to detect vulnerabilities in web applications. It can be used with the Nuclei tool to scan for specific patterns or behaviors.

Terminal window
$ nuclei -u "URL" -t "http/misconfiguration/installer/monstra-installer.yaml"

View on Github