Update CVE-2022-34047.yaml

patch-1
林寒 2022-07-21 03:54:47 +08:00 committed by GitHub
parent 46cf248bd0
commit a222f0af88
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 6 additions and 5 deletions

View File

@ -1,7 +1,7 @@
id: CVE-2022-34047
info:
name: Wavlink Password Leak
name: Wavlink Set_safety.shtml Password Leak
author: For3stCo1d
severity: high
description: |
@ -14,9 +14,10 @@ info:
tags: cve,cve2022,wavlink,router,leak
requests:
- method: GET
path:
- '{{BaseURL}}/set_safety.shtml?r=52300'
- raw:
- |
GET /set_safety.shtml?r=52300 HTTP/1.1
Host: {{Hostname}}
matchers-condition: and
matchers:
@ -24,7 +25,7 @@ requests:
part: body
words:
- "var syspasswd"
- '<title>APP</title'
- '<title>APP</title>'
condition: and
- type: status