Merge pull request #84 from michael1026/CVE-accuracy-fixes

Accuracy Fixes

cves/CVE-2019-14974.yaml

@@ -3,7 +3,7 @@ id: CVE-2019-14974
 info:
   name: SugarCRM Enterprise 9.0.0 - Cross-Site Scripting
   author: madrobot
-  severity: medium 
+  severity: low 
 
 requests:
   - method: GET
@@ -15,5 +15,5 @@ requests:
             - 200
       - type: word
         words:
-            - "1337"
+            - "url = window.location.search.split(\"?desktop_url=\")[1]"
         part: body

cves/CVE-2019-19368.yaml

@@ -15,5 +15,5 @@ requests:
             - 200
       - type: word
         words:
-            - "1337"
+            - "value=''><sVg/OnLoAD=alert`1337`//'>"
         part: body

vulnerabilities/moodle-filter-jmol-xss.yaml

@@ -15,5 +15,5 @@ requests:
             - 200
       - type: word
         words:
-            - "alert(1337)"
+            - "\"};alert(1337);//"
         part: body