add cve-2018-7841

[ghost]

I prepared it according to the PoC. Since the product was discontinued in 2018, I unfortunately don’t have a valid host or local lab setup. I would be happy if someone in the community with a lab environment could provide feedback. Thank you in advance.

Template Validation

I've validated this template locally?

• YES
• [] NO

Additional Details (leave it blank if not applicable)

Additional References:

• Nuclei Template Creation Guideline
• Nuclei Template Matcher Guideline
• Nuclei Template Contribution Guideline
• PD-Community Discord server

[darses]

Although the second request works, the matcher(s) do not. As a result, this template does not detect the vulnerability.

[ghost]

Although the second request works, the matcher(s) do not. As a result, this template does not detect the vulnerability.

I found a vulnerable asset, but the installation path can vary from asset to asset. I removed the initial request so that I don’t miss the vulnerability.

[ehsandeep]

@halil-s4e thank you for controubtion, we are able to repdocue #12967 and review / validate linked PR earliest, so we’ve merged the same.

[ghost]

@halil-s4e thank you for controubtion, we are able to repdocue #12967 and review / validate linked PR earliest, so we’ve merged the same.

Hi @ehsandeep
Yes, at the beginning I didn’t have a vulnerable asset. @darses found a vulnerable asset and successfully performed the validation. I think the reward belongs to him. Congratulations.