Update CVE-2022-25481.yaml

cves/2022/CVE-2022-25481.yaml

@@ -4,9 +4,15 @@ info:
   name: ThinkPHP 5.0.24 - Information Disclosure
   author: caon
   severity: low
-  description: ThinkPHP Framework v5.0.24 was discovered to be configured without the PATHINFO parameter. This allows attackers to access all system environment parameters from index.php.
-  reference: https://nvd.nist.gov/vuln/detail/CVE-2022-25481
-  tags: cve,cve2022,thinkphp
+  description: |
+    ThinkPHP Framework v5.0.24 was discovered to be configured without the PATHINFO parameter. This allows attackers to access all system environment parameters from index.php.
+  reference:
+    - https://github.com/Lyther/VulnDiscover/blob/master/Web/ThinkPHP_InfoLeak.md
+    - https://nvd.nist.gov/vuln/detail/CVE-2022-25481
+  metadata:
+    verified: true
+    shodan-query: title:"ThinkPHP"
+  tags: cve,cve2022,thinkphp,disclosure
 
 requests:
   - method: GET
@@ -17,9 +23,13 @@ requests:
     matchers:
       - type: word
         words:
-          - "HttpException"
           - "ThinkPHP"
-        condition: and
+
+      - type: word
+        words:
+          - "HttpException"
+          - "TRACE"
+        condition: or
 
       - type: status
         status: