daffainfo
/
nuclei-templates
mirror of https://github.com/daffainfo/nuclei-templates.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Auto Generated CVE annotations [Fri Sep 23 18:06:19 UTC 2022] 🤖

patch-1
GitHub Action 2022-09-23 18:06:19 +00:00
parent 70ee2f2f30
commit 0851e093dc
10 changed files with 13 additions and 11 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
cves/2018/CVE-2018-19458.yaml
View File

@ -10,6 +10,7 @@ info:
- https://www.exploit-db.com/exploits/45780
- https://pentest.com.tr/exploits/PHP-Proxy-3-0-3-Local-File-Inclusion.html
- https://nvd.nist.gov/vuln/detail/CVE-2018-19458
- https://www.exploit-db.com/exploits/45780/
classification:
cvss-metrics: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
cvss-score: 7.5

2
cves/2022/CVE-2022-31299.yaml
View File

@ -3,7 +3,7 @@ id: CVE-2022-31299
info:
name: Haraj 3.7 - Cross-Site Scripting
author: edoardottt
severity: high
severity: medium
description: |
Haraj 3.7 contains a cross-site scripting vulnerability in the User Upgrade Form. An attacker can inject malicious script and thus steal authentication credentials and launch other attacks.
reference:

2
vulnerabilities/other/mida-eframework-xss.yaml
View File

@ -11,7 +11,7 @@ info:
cvss-metrics: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N
cvss-score: 7.2
cwe-id: CWE-79
tags: mida,xss
tags: mida,xss,edb
requests:
- raw:

7
vulnerabilities/other/ms-exchange-server-reflected-xss.yaml
View File

@ -9,11 +9,12 @@ info:
- https://blog.orange.tw/2021/08/proxyoracle-a-new-attack-surface-on-ms-exchange-part-2.html
- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-31195
- https://nvd.nist.gov/vuln/detail/CVE-2021-31195
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31195
classification:
cvss-metrics: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N
cvss-score: 7.2
cwe-id: CWE-79
cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
cvss-score: 8.8
cve-id: CVE-2021-31195
cwe-id: CWE-79
metadata:
shodan-query: http.title:"Outlook"
tags: microsoft,exchange,owa,xss

2
vulnerabilities/other/solarview-compact-xss.yaml
View File

@ -15,7 +15,7 @@ info:
metadata:
verified: true
shodan-query: http.html:"SolarView Compact"
tags: xss,solarview
tags: xss,solarview,edb
requests:
- method: GET

2
vulnerabilities/other/tikiwiki-reflected-xss.yaml
View File

@ -12,7 +12,7 @@ info:
cvss-metrics: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N
cvss-score: 7.2
cwe-id: CWE-79
tags: xss,tikiwiki
tags: packetstorm,edb,xss,tikiwiki
requests:
- method: GET

2
vulnerabilities/royalevent/royalevent-management-xss.yaml
View File

@ -15,7 +15,7 @@ info:
cwe-id: CWE-79
metadata:
verified: true
tags: xss,authenticated,cms,royalevent
tags: cms,royalevent,packetstorm,xss,authenticated
requests:
- raw:

2
vulnerabilities/wordpress/wp-nextgen-xss.yaml
View File

@ -12,7 +12,7 @@ info:
cvss-metrics: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N
cvss-score: 7.2
cwe-id: CWE-79
tags: wordpress,xss,wp-plugin
tags: wp-plugin,edb,wordpress,xss
requests:
- method: GET

2
vulnerabilities/wordpress/wp-phpfreechat-xss.yaml
View File

@ -12,7 +12,7 @@ info:
cvss-metrics: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N
cvss-score: 7.2
cwe-id: CWE-79
tags: wordpress,xss,wp-plugin
tags: xss,wp-plugin,edb,wordpress
requests:
- method: GET

2
vulnerabilities/wordpress/wp-securimage-xss.yaml
View File

@ -12,7 +12,7 @@ info:
cvss-metrics: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N
cvss-score: 7.2
cwe-id: CWE-79
tags: wordpress,xss,wp-plugin
tags: edb,wordpress,xss,wp-plugin
requests:
- method: GET