Update CVE-2023-33629.yaml

patch-1
Ritik Chaddha 2023-11-03 16:01:16 +05:30 committed by GitHub
parent 24791d9e60
commit be142b7fa9
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 3 additions and 3 deletions

View File

@ -11,12 +11,12 @@ info:
- https://hackmd.io/@0dayResearch/r1UjggZfh
metadata:
max-request: 1
fofa-query: app="H3C-Ent-Router"
verified: true
fofa-query: app="H3C-Ent-Router"
tags: cve,cve2023,router,rce,h3c
variables:
filename: "{{to_lower(rand_text_alpha(5))}}"
filename: "{{to_lower(rand_text_alpha(7))}}"
http:
- raw:
@ -36,5 +36,5 @@ http:
- status_code_1 == 302
- contains(body_1, 'do_cmd.asp')
- status_code_2 == 200
- contains(body_2, 'www') && contains(body_2, 'www_multi')
- contains_all(body_2, 'www', 'www_multi')
condition: and