🔨 Fix false-positive CVE-2019-9978

patch-1
Dwi Siswanto 2020-08-24 09:08:46 +07:00
parent c229002dbb
commit b2828c3a44
1 changed files with 3 additions and 6 deletions

View File

@ -2,7 +2,7 @@ id: CVE-2019-9978
info:
name: WordPress social-warfare RFI
author: madrobot
author: madrobot & dwisiswant0
severity: critical
# Reference:- https://github.com/mpgn/CVE-2019-9978
@ -10,7 +10,7 @@ info:
requests:
- method: GET
path:
- "{{BaseURL}}/wp-admin/admin-post.php?swp_debug=load_options&swp_url=http://ip-api.com/json"
- "{{BaseURL}}/wp-admin/admin-post.php?swp_debug=load_options&swp_url=http://burpcollaborator.net"
matchers-condition: and
matchers:
- type: status
@ -18,8 +18,5 @@ requests:
- 200
- type: word
words:
- "timezone"
- "status"
- "country"
condition: and
- "Burp Collabolator Server"
part: body