Skip to content

Webuzo Installer

ID: webuzo-installer

Severity: high

Author: DhiyaneshDk

Tags: misconfig,webuzo,install,exposure

Webuzo is susceptible to the Installation page exposure due to misconfiguration.

id: webuzo-installer
info:
name: Webuzo Installer
author: DhiyaneshDk
severity: high
description: Webuzo is susceptible to the Installation page exposure due to misconfiguration.
classification:
cpe: cpe:2.3:a:softaculous:webuzo:*:*:*:*:*:*:*:*
metadata:
verified: true
max-request: 1
vendor: softaculous
product: webuzo
shodan-query: title:"Webuzo Installer"
tags: misconfig,webuzo,install,exposure
http:
- method: GET
path:
- '{{BaseURL}}/install.php'
matchers-condition: and
matchers:
- type: word
part: body
words:
- 'Webuzo Installer'
- 'Webuzo Initial Setup'
condition: and
- type: word
part: header
words:
- 'text/html'
- type: status
status:
- 200
# digest: 4a0a00473045022100de0920051f98a930f31318e540237885e2a5d4dd11a68d2eb4df785a331fecbe022058e8a4b9564735dd8612258605786fb328d877316f06eebb40e1c35047b91933:922c64590222798bb761d5b6d8e72950

This template is used to detect vulnerabilities in web applications. It can be used with the Nuclei tool to scan for specific patterns or behaviors.

Terminal window
$ nuclei -u "URL" -t "http/misconfiguration/installer/webuzo-installer.yaml"

View on Github