diff --git a/http/cves/2024/CVE-2024-7854.yaml b/http/cves/2024/CVE-2024-7854.yaml index 5e3a15b092..66fb667893 100644 --- a/http/cves/2024/CVE-2024-7854.yaml +++ b/http/cves/2024/CVE-2024-7854.yaml @@ -25,7 +25,7 @@ info: product: woo_inquiry framework: wordpress publicwww-query: "/wp-content/plugins/woo-inquiry" - tags: cve,cve2024,wp-plugin,sqli + tags: cve,cve2024,wp,wordpress,wp-plugin,sqli,woo-inquiry flow: http(1) && http(2) @@ -39,12 +39,11 @@ http: - type: dsl dsl: - 'contains(body,"/wp-content/plugins/woo-inquiry")' - - 'status_code == 200' - condition: and internal: true - raw: - | + @timeout: 20s POST /wp-admin/admin-ajax.php HTTP/1.1 Host: {{Hostname}} Content-Type: application/x-www-form-urlencoded; charset=UTF-8