sumowebtools-installer: SumoWebTools Installer Exposure

日期: 2025-08-01 | 影响软件: sumowebtools-installer | POC: 已公开

漏洞描述

SumoWebTools is susceptible to the Installation page exposure due to misconfiguration.

PoC代码[已公开]

id: sumowebtools-installer

info:
  name: SumoWebTools Installer Exposure
  author: DhiyaneshDk
  severity: high
  description: SumoWebTools is susceptible to the Installation page exposure due to misconfiguration.
  metadata:
    verified: true
    max-request: 1
    shodan-query: title:"SumoWebTools Installer"
  tags: misconfig,sumowebtools,install,exposure,vuln

http:
  - method: GET
    path:
      - '{{BaseURL}}/install'

    matchers-condition: and
    matchers:
      - type: word
        part: body
        words:
          - 'SumoWebTools Installer'
          - 'configure'
        condition: and

      - type: word
        part: header
        words:
          - 'text/html'

      - type: status
        status:
          - 200
# digest: 4b0a00483046022100ec69b009c86820280aad56164e687486af73f9377573ac6534153d6ecdb8573702210099880f9d0e9d4c8d3d45b3a82252ea0018b32610d1e2584269cbe6df6ec4b04d:922c64590222798bb761d5b6d8e72950
来源: https://github.com/projectdiscovery/nuclei-templates/blob/main/http/misconfiguration/installer/sumowebtools-installer.yaml

相关漏洞推荐