CVE-2023-43325 PoC — mooSocial 跨站脚本漏洞

Source

https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-43325.yaml

Associated Vulnerability

Title:mooSocial 跨站脚本漏洞 (CVE-2023-43325)
Description:mooSocial是mooSocial公司的一个多平台、移动就绪、用户友好的脚本。用于构建社区驱动的内容共享和社交网络网站。 mooSocial v3.1.8版本存在跨站脚本漏洞，该漏洞源于data[redirect_url] 参数中存在跨站脚本，允许攻击者窃取用户的会话 cookie 并通过精心设计的 URL 冒充其帐户。

Description

A reflected cross-site scripting (XSS) vulnerability exisits in the data[redirect_url] parameter on user login function of mooSocial v3.1.8 which allows attackers to steal user's session cookies and impersonate their account via a crafted URL.

File Snapshot


 id: CVE-2023-43325

info:
  name: MooSocial 3.1.8 - Cross-Site Scripting
  author: r3Y3r53
  severit

...

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!