From 5e8411900f5b8aed8797cbb628f2adfd82fed6bf Mon Sep 17 00:00:00 2001 From: SaN ThosH <25719480+Mad-robot@users.noreply.github.com> Date: Wed, 12 Aug 2020 23:09:50 +0530 Subject: [PATCH 1/3] Update CVE-2019-19985.yaml Fixing false positives previously shown vulnerable for https://books.apple.com/wp-admin/admin.php?page=download_report&report=users&status=all Originally vulnerable https://www.yacht-charter.co.uk/wp-admin/admin.php?page=download_report&report=users&status=all --- cves/CVE-2019-19985.yaml | 10 +++++++--- 1 file changed, 7 insertions(+), 3 deletions(-) diff --git a/cves/CVE-2019-19985.yaml b/cves/CVE-2019-19985.yaml index c32623eb86..3db30519c1 100644 --- a/cves/CVE-2019-19985.yaml +++ b/cves/CVE-2019-19985.yaml @@ -16,8 +16,12 @@ requests: matchers: - type: word words: - - Subscribed - + - Name + - Email + - Status + - Created On + part: body + - type: status status: - - 200 \ No newline at end of file + - 200 From dc627f2d97ff36dd7ed2469c38f471271972ec4b Mon Sep 17 00:00:00 2001 From: SaN ThosH <25719480+Mad-robot@users.noreply.github.com> Date: Wed, 12 Aug 2020 23:10:09 +0530 Subject: [PATCH 2/3] Update CVE-2019-19985.yaml --- cves/CVE-2019-19985.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/cves/CVE-2019-19985.yaml b/cves/CVE-2019-19985.yaml index 3db30519c1..e7cd9c486b 100644 --- a/cves/CVE-2019-19985.yaml +++ b/cves/CVE-2019-19985.yaml @@ -2,7 +2,7 @@ id: CVE-2019-19985 info: name: WordPress Plugin Email Subscribers & Newsletters 4.2.2 - Unauthenticated File Download - author: KBA@SOGETI_ESEC + author: KBA@SOGETI_ESEC & madrobot severity: medium # Source:- https://www.exploit-db.com/exploits/48698 From 96093904ad9b4783eb4edbc99a199f8f67e9baa2 Mon Sep 17 00:00:00 2001 From: bauthard <8293321+bauthard@users.noreply.github.com> Date: Wed, 12 Aug 2020 23:14:53 +0530 Subject: [PATCH 3/3] Update CVE-2019-19985.yaml --- cves/CVE-2019-19985.yaml | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/cves/CVE-2019-19985.yaml b/cves/CVE-2019-19985.yaml index e7cd9c486b..97ddf3b2f9 100644 --- a/cves/CVE-2019-19985.yaml +++ b/cves/CVE-2019-19985.yaml @@ -20,8 +20,8 @@ requests: - Email - Status - Created On - part: body - + part: body + - type: status status: - - 200 + - 200 \ No newline at end of file