fixed cve-2023-27847

patch-12
Ritik Chaddha 2024-09-18 19:08:59 +04:00 committed by GitHub
parent 2809ff8f39
commit 862eef161f
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 15 additions and 2 deletions

View File

@ -26,10 +26,23 @@ info:
fofa-query: app="Prestashop"
tags: cve,cve2023,prestashop,sqli,xipblog
flow: http(1) && http(2)
variables:
num: "999999999"
http:
- raw:
- |
GET / HTTP/1.1
Host: {{Hostname}}
matchers:
- type: dsl
dsl:
- 'contains_any(tolower(response), "prestashop", "xipblog")'
internal: true
- raw:
- |
@timeout: 20s
@ -45,12 +58,12 @@ http:
host-redirects: true
matchers:
- type: word
name: union-based
part: body_1
words:
- '{{md5({{num}})}}'
- type: dsl
name: time-based
dsl:
- 'duration_2>=6'
- 'contains_all(tolower(response), "prestashop")'
condition: and