CVE-2023-45540 PoC — Jorani 注入漏洞

Source

https://github.com/SoundarXploit/CVE-2023-45540

Associated Vulnerability

Title:Jorani 注入漏洞 (CVE-2023-45540)
Description:Jorani是法国Benjamin BALET个人开发者的一个休假管理系统。旨在为小型组织提供简单的休假和加班请求工作流程。 Jorani Leave Management System 1.0.3版本存在安全漏洞。攻击者利用该漏洞通过特制的脚本在“List of Leave requests”页面的comment字段中执行任意 HTML 代码。

Description

CVE-2023-45540 Jorani Leave Management System v1.0.3 –  HTML Injection

Readme

# HTML-Injection

File Snapshot


 [4.0K]  /data/pocs/2756fc658f965807b2e1e89c0c87742859ff4794
├── [1.3K]  POC.md
└── [  16]  README.md

0 directories, 2 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!