Update CVE-2019-14696.yaml

patch-1
Prince Chaddha 2022-11-01 18:43:42 +05:30 committed by GitHub
parent 0d628a81df
commit a43012c4ee
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 13 additions and 6 deletions

View File

@ -1,7 +1,7 @@
id: CVE-2019-14696 id: CVE-2019-14696
info: info:
name: Open-Scool 3.0/Community Edition 2.3 - Cross-Site Scripting name: Open-School 3.0/Community Edition 2.3 - Cross-Site Scripting
author: pikpikcu author: pikpikcu
severity: medium severity: medium
description: Open-School 3.0, and Community Edition 2.3, allows cross-site scripting via the osv/index.php?r=students/guardians/create id parameter. description: Open-School 3.0, and Community Edition 2.3, allows cross-site scripting via the osv/index.php?r=students/guardians/create id parameter.
@ -15,7 +15,7 @@ info:
cvss-score: 6.1 cvss-score: 6.1
cve-id: CVE-2019-14696 cve-id: CVE-2019-14696
cwe-id: CWE-79 cwe-id: CWE-79
tags: packetstorm,cve,cve2019,xss tags: cve,cve2019,xss,open-school
requests: requests:
- method: GET - method: GET
@ -24,12 +24,19 @@ requests:
matchers-condition: and matchers-condition: and
matchers: matchers:
- type: word
part: body
words:
- '<script>alert(document.domain)</script>'
- type: word
part: header
words:
- text/html
- type: status - type: status
status: status:
- 200 - 200
- type: word
words:
- '<script>alert(document.domain)</script>'
part: body
# Enhanced by mp on 2022/08/08 # Enhanced by mp on 2022/08/08