Merge pull request #170 from SasanLabs/Fix1

Updating Vulnerability Type
SasanLabs · Aug 8, 2020 · 0e5224c · 0e5224c
2 parents 9c5ab9a + 4491c0e
commit 0e5224c
Showing 1 changed file with 12 additions and 3 deletions.
diff --git a/...g/sasanlabs/service/vulnerability/xss/persistent/PersistentXSSInHTMLTagVulnerability.java b/...g/sasanlabs/service/vulnerability/xss/persistent/PersistentXSSInHTMLTagVulnerability.java
@@ -166,7 +166,10 @@ public ResponseBean<String> getVulnerablePayloadLevel4(ParameterBean parameterBe
 
     // NullByte
     @AttackVector(
-            vulnerabilityExposed = VulnerabilitySubType.PERSISTENT_XSS,
+            vulnerabilityExposed = {
+                VulnerabilitySubType.PERSISTENT_XSS,
+                VulnerabilitySubType.NULL_BYTE
+            },
             description =
                     "PERSISTENT_XSS_HTML_TAG_URL_PARAM_DIRECTLY_INJECTED_IN_DIV_TAG_REPLACING_IMG_AND_INPUT_TAG_IF_TAGS_ARE_PRESENT_BEFORE_NULL_BYTE")
     @VulnerabilityLevel(
@@ -191,7 +194,10 @@ public ResponseBean<String> getVulnerablePayloadLevel5(ParameterBean parameterBe
     }
 
     @AttackVector(
-            vulnerabilityExposed = VulnerabilitySubType.PERSISTENT_XSS,
+            vulnerabilityExposed = {
+                VulnerabilitySubType.PERSISTENT_XSS,
+                VulnerabilitySubType.NULL_BYTE
+            },
             description =
                     "PERSISTENT_XSS_HTML_TAG_URL_PARAM_DIRECTLY_INJECTED_IN_DIV_TAG_REPLACING_IMG_AND_INPUT_TAG_CASE_INSENSITIVEIF_TAGS_ARE_PRESENT_BEFORE_NULL_BYTE")
     @VulnerabilityLevel(
@@ -217,7 +223,10 @@ public ResponseBean<String> getVulnerablePayloadLevel6(ParameterBean parameterBe
     }
 
     @AttackVector(
-            vulnerabilityExposed = VulnerabilitySubType.PERSISTENT_XSS,
+            vulnerabilityExposed = {
+                VulnerabilitySubType.PERSISTENT_XSS,
+                VulnerabilitySubType.NULL_BYTE
+            },
             description =
                     "PERSISTENT_XSS_HTML_TAG_URL_PARAM_DIRECTLY_INJECTED_IN_DIV_TAG_AFTER_HTML_ESCAPING_POST_CONTENT_BEFORE_NULL_BYTE")
     @VulnerabilityLevel(