CVE-2023-46451 PoC — Best Courier Management System 跨站脚本漏洞

Source

https://github.com/sajaljat/CVE-2023-46451

Associated Vulnerability

Title: Best Courier Management System 跨站脚本漏洞 (CVE-2023-46451)
Description:Best Courier Management System v1.0 is vulnerable to Cross Site Scripting (XSS) in the change username field.

Readme

# CVE-2023-46451
Suggested description
 Sourcecodester Best courier management system v1.0 is vulnerable to
 Cross Site Scripting (XSS) in the change username field.

 ------------------------------------------

Additional Information
 Here I update the video POC on the you tube : https://youtu.be/f8B3_m5YfqI

 ------------------------------------------

 Vulnerability Type
 Cross Site Scripting (XSS)
------------------------------------------

Affected Product Code Base
Open Source

------------------------------------------

Affected Component
change username field

------------------------------------------

Attack Type
 Remote

------------------------------------------

Attack Vectors
 upload the XSS payload in username field

 ------------------------------------------

Reference
 https://youtu.be/f8B3_m5YfqI

------------------------------------------

Discoverer
sajal jat

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →