Update CVE-2019-14696.yaml
parent
0d628a81df
commit
a43012c4ee
|
@ -1,7 +1,7 @@
|
||||||
id: CVE-2019-14696
|
id: CVE-2019-14696
|
||||||
|
|
||||||
info:
|
info:
|
||||||
name: Open-Scool 3.0/Community Edition 2.3 - Cross-Site Scripting
|
name: Open-School 3.0/Community Edition 2.3 - Cross-Site Scripting
|
||||||
author: pikpikcu
|
author: pikpikcu
|
||||||
severity: medium
|
severity: medium
|
||||||
description: Open-School 3.0, and Community Edition 2.3, allows cross-site scripting via the osv/index.php?r=students/guardians/create id parameter.
|
description: Open-School 3.0, and Community Edition 2.3, allows cross-site scripting via the osv/index.php?r=students/guardians/create id parameter.
|
||||||
|
@ -15,7 +15,7 @@ info:
|
||||||
cvss-score: 6.1
|
cvss-score: 6.1
|
||||||
cve-id: CVE-2019-14696
|
cve-id: CVE-2019-14696
|
||||||
cwe-id: CWE-79
|
cwe-id: CWE-79
|
||||||
tags: packetstorm,cve,cve2019,xss
|
tags: cve,cve2019,xss,open-school
|
||||||
|
|
||||||
requests:
|
requests:
|
||||||
- method: GET
|
- method: GET
|
||||||
|
@ -24,12 +24,19 @@ requests:
|
||||||
|
|
||||||
matchers-condition: and
|
matchers-condition: and
|
||||||
matchers:
|
matchers:
|
||||||
|
|
||||||
|
- type: word
|
||||||
|
part: body
|
||||||
|
words:
|
||||||
|
- '<script>alert(document.domain)</script>'
|
||||||
|
|
||||||
|
- type: word
|
||||||
|
part: header
|
||||||
|
words:
|
||||||
|
- text/html
|
||||||
|
|
||||||
- type: status
|
- type: status
|
||||||
status:
|
status:
|
||||||
- 200
|
- 200
|
||||||
- type: word
|
|
||||||
words:
|
|
||||||
- '<script>alert(document.domain)</script>'
|
|
||||||
part: body
|
|
||||||
|
|
||||||
# Enhanced by mp on 2022/08/08
|
# Enhanced by mp on 2022/08/08
|
||||||
|
|
Loading…
Reference in New Issue