NexposeAPI SiteSaveRequest failure

[grutz]

From https://github.com/KvasirSecurity/Kvasir/blob/master/modules/NexposeAPI.py#L210 - site save option isn’t responding correctly. The base of it is that the configID and siteIDs were being used interchangeably, even though they were different objects.

The call can look like this:

def save(self, siteid="-1", sitename="", hosts=[], configid="", configname="", sitedescription="", template="pentest-audit")

<SiteSaveRequest session-id="%s">
    <Site id="%s" name="%s" description="%s">
        <Hosts>%s</Hosts>
        <Credentials></Credentials>
        <Alerting></Alerting>
        <ScanConfig configID="%s" name="%s" templateID="%s"></ScanConfig>"
    </Site>
</SiteSaveRequest>""" % (self.sessionid, siteid, sitename, sitedescription, "".join(hostxml), configid, configname, template)

Reported privately by third party