Update CVE-2022-24124.yaml

cves/2022/CVE-2022-24124.yaml

@@ -2,15 +2,16 @@ id: CVE-2022-24124
 
 info:
   name: Casdoor 1.13.0 - SQL Injection (Unauthenticated)
-  description: The query API in Casdoor before 1.13.1 has a SQL injection vulnerability related to the field and value parameters, as demonstrated by api/get-organizations.
   author: cckuailong
   severity: high
+  description: The query API in Casdoor before 1.13.1 has a SQL injection vulnerability related to the field and value parameters, as demonstrated by api/get-organizations.
   reference:
-    - https://nvd.nist.gov/vuln/detail/CVE-2022-24124
     - https://www.exploit-db.com/exploits/50792
     - https://github.com/cckuailong/reapoc/tree/main/2022/CVE-2022-24124/vultarget
+    - https://nvd.nist.gov/vuln/detail/CVE-2022-24124
   metadata:
     product: https://casdoor.org/
+    shodan-query: http.title:"Casdoor"
   classification:
     cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
     cvss-score: 7.5
@@ -25,16 +26,13 @@ requests:
 
     matchers-condition: and
     matchers:
-      - type: status
-        status:
-          - 200
-
-      - type: word
-        part: header
-        words:
-          - "text/html"
-
       - type: regex
         part: body
         regex:
           - "XPATH syntax error.*&#39"
+          - "casdoor"
+        condition: and
+
+      - type: status
+        status:
+          - 200