From eedaba58a727026036d2f5fa388183762b22b2d0 Mon Sep 17 00:00:00 2001
From: Simon Bennetts <psiinon@gmail.com>
Date: Mon, 1 Sep 2025 09:20:34 +0100
Subject: [PATCH] Wavsep: Score OS Cmd injection tests

Depends on https://github.com/zaproxy/wavsep/pull/13
---
 scans/wavsep/wavsep-score.js | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/scans/wavsep/wavsep-score.js b/scans/wavsep/wavsep-score.js
index 21cff37c..7b73613e 100644
--- a/scans/wavsep/wavsep-score.js
+++ b/scans/wavsep/wavsep-score.js
@@ -196,6 +196,11 @@ scoreChildren("redir-get-fp", "Unvalidated Redirect GET False Positives", "/Redi
 scoreChildren("redir-get-200-valid", "Unvalidated Redirect GET 200 Valid", "/Redirect-JavaScript-Detection-Evaluation-GET-200Valid/", [20019]);
 scoreChildren("redir-post-200-valid", "Unvalidated Redirect POST 200 Valid", "/Redirect-JavaScript-Detection-Evaluation-POST-200Valid/", [20019]);
 
+scoreChildren("cmdi-get-200-error", "OS Command Injection GET 200 Error", "/OS-Command-Injection/OS-Command-Injection-GET-200Error", [90020]);
+scoreChildren("cmdi-get-500-error", "OS Command Injection GET 500 Error", "/OS-Command-Injection/OS-Command-Injection-GET-500Error", [90020]);
+scoreChildren("cmdi-post-200-error", "OS Command Injection POST 200 Error", "/OS-Command-Injection/OS-Command-Injection-POST-200Error", [90020]);
+scoreChildren("cmdi-post-500-error", "OS Command Injection POST 500 Error", "/OS-Command-Injection/OS-Command-Injection-POST-500Error", [90020]);
+
 scoreTotal();
 
 print('Done');