diff --git a/nuclei-templates/cve-less/themes/jobify-97174b3d83fda0ca84d25d3b293eee14.yaml b/nuclei-templates/cve-less/themes/jobify-97174b3d83fda0ca84d25d3b293eee14.yaml new file mode 100644 index 0000000000..930e1c1ed4 --- /dev/null +++ b/nuclei-templates/cve-less/themes/jobify-97174b3d83fda0ca84d25d3b293eee14.yaml @@ -0,0 +1,59 @@ +id: jobify-97174b3d83fda0ca84d25d3b293eee14 + +info: + name: > + Jobify - Job Board WordPress Theme <= 4.2.3 - Unauthenticated Arbitrary File Read + author: topscoder + severity: low + description: > + + reference: + - https://github.com/topscoder/nuclei-wordfence-cve + - https://www.wordfence.com/threat-intel/vulnerabilities/id/78af7acb-bcaf-4ad9-807e-4a95a522f8c5?source=api-scan + classification: + cvss-metrics: + cvss-score: + cve-id: + metadata: + fofa-query: "wp-content/themes/jobify/" + google-query: inurl:"/wp-content/themes/jobify/" + shodan-query: 'vuln:' + tags: cve,wordpress,wp-theme,jobify,low + +http: + - method: GET + redirects: true + max-redirects: 3 + path: + - "{{BaseURL}}/wp-content/themes/jobify/style.css" + + extractors: + - type: regex + name: version + part: body + group: 1 + internal: true + regex: + - "(?mi)Version: ([0-9.]+)" + + - type: regex + name: version + part: body + group: 1 + regex: + - "(?mi)Version: ([0-9.]+)" + + matchers-condition: and + matchers: + - type: status + status: + - 200 + + - type: word + words: + - "jobify" + part: body + + - type: dsl + dsl: + - compare_versions(version, '<= 4.2.3') \ No newline at end of file