Merge pull request #7000 from j4vaovo/patch-4

Update CVE-2022-46169.yaml

cves/2022/CVE-2022-46169.yaml

@@ -1,7 +1,7 @@
 id: CVE-2022-46169
 
 info:
-  name: Cacti <= 1.2.22 Unauthenticated Command Injection
+  name: Cacti <= 1.2.22 - Unauthenticated Command Injection
   author: Hardik-Solanki
   severity: critical
   description: |
@@ -19,7 +19,10 @@ info:
   metadata:
     shodan-query: title:"Login to Cacti"
     verified: "true"
-  tags: cve2022,cve,auth-bypass,cacti,kev
+  tags: cve2022,cve,auth-bypass,cacti,kev,rce,unauth
+
+variables:
+  useragent: '{{rand_base(6)}}'
 
 requests:
   - raw:
@@ -43,6 +46,11 @@ requests:
         words:
           - "http"
 
+      - type: word
+        part: interactsh_request
+        words:
+          - "User-Agent: {{useragent}}"
+
       - type: status
         status:
           - 200