Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Too many results returned, fails to show there are vulnerabilities #13

Open
ghost opened this issue Nov 18, 2018 · 0 comments
Open

Too many results returned, fails to show there are vulnerabilities #13

ghost opened this issue Nov 18, 2018 · 0 comments

Comments

@ghost
Copy link

ghost commented Nov 18, 2018

Given a site "www.notrealsite.com" with header: X-Powered-By: PHP/5.3.3

The extension outputs:
[Vulners] start check for domain www.notrealsite.com for software PHP, headers/5.3.3 : https://vulners.com/api/v3/burp/software/?software=cpe%3A%2Fa%3Aphp%3Aphp&version=5.3.3&type=cpe
But does not report anything in Burp.

Opening this URL manually:
https://vulners.com/api/v3/burp/software/?software=cpe%3A%2Fa%3Aphp%3Aphp&version=5.3.3&type=cpe

returns this:
{
"result": "warning",
"data": {
"warning": "Too much results - 70 for the query (cpe:"cpe:/a:php:php" AND (cpe:5.3.3* OR (description:"5.3.3" AND NOT ("before version 5.3.3" OR "< 5.3.3" OR "less than 5.3.3" OR "before 5.3.3" OR "prior to 5.3.3")))) OR (description:"php" AND description:"5.3.3" AND title:"php" AND bulletinFamily:exploit AND NOT ("before version 5.3.3" OR "< 5.3.3" OR "less than 5.3.3" OR "before 5.3.3" OR "prior to 5.3.3") AND -type:seebug) with software:cpe:/a:php:php version:5.3.3",
"errorCode": 402
}
}

I should mention i am using Burp 2.0.12beta

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

0 participants