[FALSE-POSITIVE] weaver-checkserver-sqli

[iuliu8899]

Template IDs or paths

• weaver-checkserver-sqli

Environment

• OS: macOS 15.0.1
• Nuclei: v3.3.5
• Go: go1.23.2 darwin/arm64

Steps To Reproduce

nuclei -u https://oa.sphchina.com/api/package_search -id weaver-checkserver-sqli

Relevant dumped responses

HTTP/1.1 200 OK
Connection: close
Content-Length: 62
Cache-Control: no-cache
Content-Type: application/json; charset=utf-8
Date: Thu, 31 Oct 2024 13:24:43 GMT
Expires: Thu, 01 Dec 1994 16:00:00 GMT
Server: nginx
Set-Cookie: route=bcb2674bf1bcc09bb4c7af61369aa97f; Path=/
Set-Cookie: __clusterSessionIDCookieName=f7d5ffc9-218c-4f0a-92bb-9b352431c230; path=/
Set-Cookie: __clusterSessionCookieName=E3D7F262DD88E49DCA8489743CDD2C5E; path=/
Set-Cookie: ecology_JSessionid=aaaVj6JgAubmLaEtrDbkz; path=/

{"msg":"登录信息超时","errorCode":"002","status":false}

Anything else?

it's differnet for goevaluate function treat " and \".

"contains(body, 'error\":\"system error') && !contains(body, 'securityIntercept')"

this dsl in goevaluate will be treat as

contains(body, 'error":"system error') && !contains(body, 'securityIntercept')

which is not correct since goevaluate would consider " as a Quote mark but not a character in string.