CVE-2023-29623 PoC — Purchase Order Management 跨站脚本漏洞

Source

https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-29623.yaml

Associated Vulnerability

Title:Purchase Order Management 跨站脚本漏洞 (CVE-2023-29623)
Description:Sourcecodester Purchase Order Management System是一个简单的采购订单管理系统，用于管理某个公司的采购订单记录。 Purchase Order Management v1.0版本存在安全漏洞，该漏洞源于通过/purchase_order/classes/login.php中的password参数发现包含反射型跨站点脚本(XSS)漏洞。

Description

Purchase Order Management v1.0 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the password parameter at /purchase_order/classes/login.php.

File Snapshot


 id: CVE-2023-29623

info:
  name: Purchase Order Management v1.0 - Cross Site Scripting (Reflected)


...

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!