diff --git a/http/cves/2023/CVE-2023-30150.yaml b/http/cves/2023/CVE-2023-30150.yaml index 819e5f8d4a..15ff052bd8 100644 --- a/http/cves/2023/CVE-2023-30150.yaml +++ b/http/cves/2023/CVE-2023-30150.yaml @@ -37,5 +37,5 @@ http: dsl: - 'duration_2>=6' - 'status_code == 200' - - 'contains(response_1, "PrestaShop")' + - 'contains(tolower(response_1), "prestashop")' condition: and diff --git a/http/vulnerabilities/prestashop/prestashop-apmarketplace-sqli.yaml b/http/vulnerabilities/prestashop/prestashop-apmarketplace-sqli.yaml index 76722d95a1..300d898b09 100644 --- a/http/vulnerabilities/prestashop/prestashop-apmarketplace-sqli.yaml +++ b/http/vulnerabilities/prestashop/prestashop-apmarketplace-sqli.yaml @@ -16,6 +16,10 @@ info: http: - raw: + - | + GET / HTTP/1.1 + Host: {{Hostname}} + - | POST /m/apmarketplace/passwordrecovery HTTP/1.1 Host: {{Hostname}} @@ -28,7 +32,7 @@ http: matchers: - type: dsl dsl: - - 'duration>=6' + - 'duration_2>=6' - 'status_code == 200' - - 'contains(header, "PrestaShop")' + - 'contains(tolower(response_1), "prestashop")' condition: and \ No newline at end of file