CVE-2024-39090 PoC — Online Shopping Portal 安全漏洞

Source

Associated Vulnerability

Description

This PoC script exploits CVE-2024-39090, a CSRF to Stored XSS vulnerability in PHPGurukul Online Shopping Portal v2.0. It automates CSRF attacks to inject persistent JavaScript payloads, which execute when a privileged user accesses the affected page, enabling actions such as session hijacking or credential theft.

Readme

# CVE-2024-39090 PoC Exploit Script
This PoC script exploits CVE-2024-39090, a CSRF to Stored XSS vulnerability in PHPGurukul Online Shopping Portal v2.0. It automates CSRF attacks to inject persistent JavaScript payloads, which execute when a privileged user accesses the affected page, enabling actions such as session hijacking or credential theft.

File Snapshot

 [4.0K]  /data/pocs/738df835838469fdf1afad6b64345a339a44a404
├── [1.0K]  LICENSE
└── [ 352]  README.md

0 directories, 2 files

Remarks