CVE-2023-49489 PoC — kodbox 安全漏洞

Source

https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-49489.yaml

Associated Vulnerability

Title:kodbox 安全漏洞 (CVE-2023-49489)
Description:kodbox是一个网络文件管理器。 kodbox 4.51 版本存在安全漏洞，该漏洞源于 config/i18n/en/main.php 的 APP_HOST 参数可以获取敏感信息并提升权限。

Description

Reflective Cross Site Scripting (XSS) vulnerability in KodExplorer version 4.51, allows attackers to obtain sensitive information and escalate privileges via the APP_HOST parameter at config/i18n/en/main.php.

File Snapshot


 id: CVE-2023-49489

info:
  name: KodeExplorer 4.51 - Reflective Cross Site Scripting (XSS)
  author

...

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!