From 7bc5bf03becb4d3b55b81d2e72bfe1c234acb661 Mon Sep 17 00:00:00 2001
From: Dwi Siswanto <dwi.siswanto98@gmail.com>
Date: Thu, 31 Dec 2020 15:51:24 +0700
Subject: [PATCH] :hammer: Splitting matcher parts

---
 cves/CVE-2020-10148.yaml | 14 +++++++++++---
 1 file changed, 11 insertions(+), 3 deletions(-)

diff --git a/cves/CVE-2020-10148.yaml b/cves/CVE-2020-10148.yaml
index 035b0f69a0..bd246d3aba 100644
--- a/cves/CVE-2020-10148.yaml
+++ b/cves/CVE-2020-10148.yaml
@@ -21,9 +21,17 @@ requests:
       - "{{BaseURL}}/SWNetPerfMon.db.i18n.ashx?l=nuclei&v=nuclei"
     matchers-condition: and
     matchers:
-      - type: regex
-        regex:
-          - "SolarWinds(\\.Orion\\.Core\\.|OrionDatabaseUser)"
+      - type: word
+        words:
+          - "text/plain"
+          - "SolarWindsOrionDatabaseUser"
+        condition: or
+        part: header
+      - type: word
+        words:
+          - "Connection String"
+          - "SolarWinds.Orion.Core."
+        condition: or
         part: body
       - type: status
         status: