Adding CVE

n3k00n3 · web-flow · commit 1038637d7606 · 2019-07-24T17:38:51.000-03:00
diff --git a/cms/ovidentia/exploitXSSOvidentia.txt b/cms/ovidentia/exploitXSSOvidentia.txt
@@ -1,17 +1,20 @@
 #-------------------------------------------------------
-# Exploit Title: Ovidentia CMS - Blind SQL Injection (Authenticated)
+# Exploit Title: Ovidentia CMS - XSS Ovidentia 8.4.3
+# The vulnerability permits any kind of XSS attacks. Reflected, DOM and Stored XSS.
 # Date: 06/05/2019
+# [ CVE-2019-13977 ]
 # Exploit Author:
-# Fernando Pinheiro (n3k00n3)
-# Victor Flores	    (UserX)
+#     Fernando Pinheiro (n3k00n3)
+#     Victor Flores	    (UserX)
 # Vendor Homepage: https://www.ovidentia.org/
 # Version: 8.4.3
 # Tested on: Mac,linux - Firefox, safari
 # Download http://en.ovidentia.org/index.php?tg=fileman&sAction=getFile&id=17&gr=Y&path=Downloads%2FDistributions&file=ovidentia-8-4-3.zip&idf=893
-# [ Kitsun3Sec Research Group ]
+#
+#           [ Kitsun3Sec Research Group ]
 #--------------------------------------------------------
 
-POC
+POC 
 
 >========================================================
                       Stored XSS
