id: eventum-panel

info:
  name: Eventum Login Panel - Detect
  author: princechaddha
  severity: info
  description: Eventum login panel was detected.
  classification:
    cvss-metrics: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N
    cwe-id: CWE-200
    cpe: cpe:2.3:a:mysql:eventum:*:*:*:*:*:*:*:*
  metadata:
    verified: true
    max-request: 1
    vendor: mysql
    product: eventum
    shodan-query: http.favicon.hash:305412257
    fofa-query: icon_hash=305412257
  tags: panel,eventum,mysql,discovery

http:
  - method: GET
    path:
      - "{{BaseURL}}"

    host-redirects: true
    max-redirects: 2

    matchers-condition: or
    matchers:
      - type: word
        part: body
        words:
          - '<title>Login - Eventum</title>'
          - 'title="Eventum Issues search"'
        condition: or

      - type: word
        part: body
        words:
          - 'Database Error:'
          - 'There seems to be a problem connecting to the database server specified
            in your configuration file'
        condition: and
# digest: 490a004630440220261c373ede512cfcc24eb5ff4b39b8bfe533ea82686b9d5c8eb2aa986e811f9b02205e61dbb5a912d0516e4d7001393f593c7b347c84ca11568e66c4f6061d4d13ce:922c64590222798bb761d5b6d8e72950