Update CVE-2023-37270.yaml

patch-1
Ritik Chaddha 2023-07-13 13:24:44 +05:30 committed by GitHub
parent 37d30cce82
commit 92675d0756
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 12 additions and 5 deletions

View File

@ -34,12 +34,19 @@ http:
GET /admin.php?page=user_activity HTTP/1.1
Host: {{Hostname}}
host-redirects: true
cookie-reuse: true
matchers-condition: and
matchers:
- type: dsl
dsl:
- "status_code_2 == 200"
- "contains(body_2,'Warning: [mysql error') && contains(body_2,'INSERT INTO') && contains(body_2,'SQL syntax;')"
- type: word
part: body_2
words:
- 'Warning: [mysql error'
- 'INSERT INTO'
- 'SQL syntax;'
condition: and
- type: status
part: body_2
status:
- 200