matcher and info update

http/cves/2023/CVE-2023-2766.yaml

@@ -1,18 +1,24 @@
 id: CVE-2023-2766
 
 info:
-  name: OA E-Office jx2_config.ini - Information Leakage
+  name: Weaver OA 9.5 - Information Disclosure
   author: DhiyaneshDK
   severity: high
   description: |
     A vulnerability was found in Weaver OA 9.5 and classified as problematic. This issue affects some unknown processing of the file /building/backmgr/urlpage/mobileurl/configfile/jx2_config.ini. The manipulation leads to files or directories accessible. The attack may be initiated remotely.
   reference:
     - https://github.com/8079048q/cve/blob/main/weaveroa.md
+    - https://nvd.nist.gov/vuln/detail/CVE-2023-2766
+  classification:
+    cve-id: CVE-2023-2766
+    cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
+    cvss-score: 7.5
+    cwe-id: CWE-552
   metadata:
     max-request: 1
-    fofa-query: app="泛微-EOffice"
     verified: true
-  tags: cve,cve2023,e-office,info-leak
+    fofa-query: app="泛微-EOffice"
+  tags: cve,cve2023,weaver,eoffice,exposure
 
 http:
   - method: GET
@@ -24,5 +30,5 @@ http:
         dsl:
           - 'status_code == 200'
           - 'contains(header,"text/plain")'
-          - 'contains(body,"sdbuser") && contains(body, "sdbpassword")'
+          - 'contains_all(body, "sdbuser =","sdbpassword =")'
         condition: and