CVE-2021-26119.yml

id: CVE-2021-26119
info:
  name: Tiki Wiki chained RCE
  author: z3bd
  severity: high
  description: Smarty before 3.1.39 allows a Sandbox Escape because $smarty.template_object can be accessed in sandbox mode. 
  cvss: 7.5

requests:
  - method: GET
    path: 
      - "{{BaseURL}}/"

    matchers-condition: and
    matchers:
      - type: status
        status:
          - 200
      - type: word
        words:
          - "smarty"
          - "tiki_wiki_page"