CVE-2019-18873 PoC — FUDForum 跨站脚本漏洞

Description

FUDForum 3.0.9 - XSS / Remote Code Execution (CVE-2019-18873, CVE-2019-18839)

介绍

# FUDforum-XSS-RCE
FUDForum 3.0.9 - XSS / Remote Code Execution (CVE-2019-18873, CVE-2019-18839)

Multiple Stored XSS vulnerabilities have been found in FUDforum 3.0.9 that can result in remote code execution.

Stored XSS via username in forum: [Info](https://github.com/fuzzlove/FUDforum-XSS-RCE/blob/master/forumxss.md) | [Demo](https://youtu.be/fR8hVK1paks)

Stored XSS via useragent in admin panel: [Info](https://github.com/fuzzlove/FUDforum-XSS-RCE/blob/master/adminpanel.md) | [Demo](https://youtu.be/0gsJQ82TXw4)

文件快照

备注