From 92675d07564c4b581f3c23c0040753316f01afdf Mon Sep 17 00:00:00 2001 From: Ritik Chaddha <44563978+ritikchaddha@users.noreply.github.com> Date: Thu, 13 Jul 2023 13:24:44 +0530 Subject: [PATCH] Update CVE-2023-37270.yaml --- http/cves/2023/CVE-2023-37270.yaml | 17 ++++++++++++----- 1 file changed, 12 insertions(+), 5 deletions(-) diff --git a/http/cves/2023/CVE-2023-37270.yaml b/http/cves/2023/CVE-2023-37270.yaml index c033626e3d..10d85e2cd5 100644 --- a/http/cves/2023/CVE-2023-37270.yaml +++ b/http/cves/2023/CVE-2023-37270.yaml @@ -34,12 +34,19 @@ http: GET /admin.php?page=user_activity HTTP/1.1 Host: {{Hostname}} - host-redirects: true cookie-reuse: true matchers-condition: and matchers: - - type: dsl - dsl: - - "status_code_2 == 200" - - "contains(body_2,'Warning: [mysql error') && contains(body_2,'INSERT INTO') && contains(body_2,'SQL syntax;')" + - type: word + part: body_2 + words: + - 'Warning: [mysql error' + - 'INSERT INTO' + - 'SQL syntax;' + condition: and + + - type: status + part: body_2 + status: + - 200