Skip to content

Commit

Permalink
New Nuclei template for jobify-97174b3d83fda0ca84d25d3b293eee14.yaml …
Browse files Browse the repository at this point in the history
…[Wed Nov 27 03:47:31 UTC 2024] :robot:
  • Loading branch information
actions-user committed Nov 27, 2024
1 parent 398c6e8 commit ee19bdf
Showing 1 changed file with 59 additions and 0 deletions.
Original file line number Diff line number Diff line change
@@ -0,0 +1,59 @@
id: jobify-97174b3d83fda0ca84d25d3b293eee14

info:
name: >
Jobify - Job Board WordPress Theme <= 4.2.3 - Unauthenticated Arbitrary File Read
author: topscoder
severity: low
description: >
reference:
- https://github.com/topscoder/nuclei-wordfence-cve
- https://www.wordfence.com/threat-intel/vulnerabilities/id/78af7acb-bcaf-4ad9-807e-4a95a522f8c5?source=api-scan
classification:
cvss-metrics:
cvss-score:
cve-id:
metadata:
fofa-query: "wp-content/themes/jobify/"
google-query: inurl:"/wp-content/themes/jobify/"
shodan-query: 'vuln:'
tags: cve,wordpress,wp-theme,jobify,low

http:
- method: GET
redirects: true
max-redirects: 3
path:
- "{{BaseURL}}/wp-content/themes/jobify/style.css"

extractors:
- type: regex
name: version
part: body
group: 1
internal: true
regex:
- "(?mi)Version: ([0-9.]+)"

- type: regex
name: version
part: body
group: 1
regex:
- "(?mi)Version: ([0-9.]+)"

matchers-condition: and
matchers:
- type: status
status:
- 200

- type: word
words:
- "jobify"
part: body

- type: dsl
dsl:
- compare_versions(version, '<= 4.2.3')

0 comments on commit ee19bdf

Please sign in to comment.