CVE-2023-33580 PoC — Student Study Center Management System 跨站脚本漏洞

Source

https://github.com/sudovivek/Published-CVE

Associated Vulnerability

Title:Student Study Center Management System 跨站脚本漏洞 (CVE-2023-33580)
Description:Phpgurukul Student Study Center Management System V1.0 is vulnerable to Cross Site Scripting (XSS) in the "Admin Name" field on Admin Profile page.

Description

Explore CVE-2023-33580 (XSS) & CVE-2023-33584 (SQLI) discovered by me. Dive into vulnerabilities and exploits for insights.

Readme

# Published-CVE

This repository contains descriptions and exploits for two security vulnerabilities:

1. CVE-2023-33580: Stored Cross-Site Scripting (XSS) in the Student Study Center Management System V1.0, allowing attackers to execute arbitrary JavaScript code.

2. CVE-2023-33584: SQL Injection (SQLI) in the Enrollment System Project V1.0, enabling attackers to bypass authentication and gain unauthorized access.

For each vulnerability, there is a detailed description, exploit author, vendor homepage, software link, and steps to reproduce the exploit.

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!