Update CVE-2024-7854.yaml

patch-12
Ritik Chaddha 2024-10-08 10:30:46 +04:00 committed by GitHub
parent 1494e4eb42
commit 098b89ed27
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 2 additions and 3 deletions

View File

@ -25,7 +25,7 @@ info:
product: woo_inquiry product: woo_inquiry
framework: wordpress framework: wordpress
publicwww-query: "/wp-content/plugins/woo-inquiry" publicwww-query: "/wp-content/plugins/woo-inquiry"
tags: cve,cve2024,wp-plugin,sqli tags: cve,cve2024,wp,wordpress,wp-plugin,sqli,woo-inquiry
flow: http(1) && http(2) flow: http(1) && http(2)
@ -39,12 +39,11 @@ http:
- type: dsl - type: dsl
dsl: dsl:
- 'contains(body,"/wp-content/plugins/woo-inquiry")' - 'contains(body,"/wp-content/plugins/woo-inquiry")'
- 'status_code == 200'
condition: and
internal: true internal: true
- raw: - raw:
- | - |
@timeout: 20s
POST /wp-admin/admin-ajax.php HTTP/1.1 POST /wp-admin/admin-ajax.php HTTP/1.1
Host: {{Hostname}} Host: {{Hostname}}
Content-Type: application/x-www-form-urlencoded; charset=UTF-8 Content-Type: application/x-www-form-urlencoded; charset=UTF-8