CVE-2021-43810 PoC — Admidio 跨站脚本漏洞

Source

https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-43810.yaml

Associated Vulnerability

Title:Admidio 跨站脚本漏洞 (CVE-2021-43810)
Description:Admidio是Admidio团队的一套开源的成员管理系统。该系统支持成员列表、事件管理、留言簿、相册和下载等功能。 Admidio 4.0.12 之前的版本中存在跨站脚本漏洞，该漏洞源于 redirect.php 没有正确验证 url 参数的值。

Description

A cross-site scripting vulnerability is present in Admidio prior to version 4.0.12. The reflected cross-site scripting vulnerability occurs because redirect.php does not properly validate the value of the url parameter. Through this vulnerability, an attacker is capable to execute malicious scripts.

File Snapshot


 id: CVE-2021-43810

info:
  name: Admidio - Cross-Site Scripting
  author: gy741
  severity: medium


...

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!