id: formalms-install info: name: Formalms Exposed Installation author: princechaddha severity: high description: Formalms Installation is exposed. metadata: max-request: 1 tags: misconfig,formalms http: - method: GET path: - '{{BaseURL}}/install/' matchers-condition: and matchers: - type: word part: body words: - 'forma.lms installer' - '

forma.lms - Installation

' condition: and - type: status status: - 200 # digest: 4b0a00483046022100b959663f7b5376e9086b4fba1a8c52e5c2f68c2c5c317542383397e45a95861f0221008cdd4ea40a3ee621df95e7be09af9eb0823b6658bc2a998ebdfaf9f0006ff84c:922c64590222798bb761d5b6d8e72950