Justboil.ME Plugins Image Upload Vulnerability New Method

[0xr2r]

Is there an existing template for this?

• I have searched the existing templates.

Nuclei Template

id: justboil-me-image-upload

info:
  name: Justboil.ME Plugins Image Upload Vulnerability
  author: 0xr2r
  severity: medium
  reference: https://github.com/0xr2r
  description: |
    This template checks for the Justboil.ME image upload vulnerability by verifying the presence of the vulnerable dialog file.
  tags: justboil, image-upload, vulnerability

http:
  - method: GET
    path:
      - "{{BaseURL}}/plugins/generic/tinymce/plugins/justboil.me/dialog-v4.htm"

    matchers-condition: and
    matchers:
      - type: status
        status:
          - 200
      - type: word
        words:
          - "JustBoil.me Images Plugin"
          - "TinyMCE"
      - type: word
        part: header
        words:
          - "Content-Type: text/html"

    extractors:
      - type: regex
        part: body
        regex:
          - "<title>(.*?)</title>"

Relevant dumped responses

Anything else?