diff --git a/vulnerabilities/other/triconsole-xss.yaml b/vulnerabilities/other/triconsole-xss.yaml new file mode 100644 index 0000000000..9e987db15b --- /dev/null +++ b/vulnerabilities/other/triconsole-xss.yaml @@ -0,0 +1,25 @@ +id: triconsole-xss + +info: + name: Triconsole 3.75 XSS + author: pikpikcu + severity: medium + reference: https://cxsecurity.com/issue/WLB-2021020168 + tags: triconsole,lfi + +requests: + - method: GET + path: + - '{{BaseURL}}/calendar_form.php/">' + matchers-condition: and + matchers: + + - type: word + words: + - "" + part: body + condition: and + + - type: status + status: + - 200