CVE-2023-28467 PoC — MyBB 跨站脚本漏洞

Source

https://github.com/ahmetaltuntas/CVE-2023-28467

Associated Vulnerability

Title:MyBB 跨站脚本漏洞 (CVE-2023-28467)
Description:MyBB（MyBulletinBoard）是MYBB团队的开发的一套用PHP和MySQL开发的免费且基于Web的论坛软件。该软件具有简单易用、支持多国语言、可扩展等特点。 MyBB 1.8.34之前版本存在安全漏洞，该漏洞源于User CP模块中的用户邮箱存在跨站脚本(XSS)漏洞。

Readme


# MyBB 1.8.33 User CP email persistent XSS

```
- MyBB 1.8.33 User CP email persistent XSS
- Mybb version < 1.8.34 
- Discoverer: Ahmet Altuntaş
- https://github.com/mybb/mybb/security/advisories/GHSA-3q8x-9fh2-v646
```

## Description

Cross-site scripting (XSS) vulnerability in the User CP module allows remote authenticated users to inject HTML via the user email field, triggered on the User CP Home page.

After registration, the e-mail address is changed and the XSS payload is placed. Then, when "User CP" is entered, the vulnerability is triggered.

```
Payload:
"><svg/onload=confirm('CVE')>"@cve.com
```
![img](https://github.com/ahmetaltuntas/CVE-2023-28467/blob/main/1.png?raw=true)


![img](https://github.com/ahmetaltuntas/CVE-2023-28467/blob/main/2.png?raw=true)

## Solution
Upgrade MyBB version 1.8.34 or higher

File Snapshot


 [4.0K]  /data/pocs/393dc71ed2cdeaf6cc2c767b707209142d43b8c1
├── [436K]  1.png
├── [507K]  2.png
└── [ 832]  README.md

0 directories, 3 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!