CVE-2022-34328 PoC — PMB 跨站脚本漏洞

Source

https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-34328.yaml

Associated Vulnerability

Title:PMB 跨站脚本漏洞 (CVE-2022-34328)
Description:PMB是PMB Services团队的一个 100% 免费文档管理的参考工具。 PMB 7.3.10 存在跨站脚本漏洞，该漏洞源于index.php的id参数缺少过滤和转义。

Description

PMB 7.3.10 contains a reflected cross-site scripting vulnerability via the id parameter in an lvl=author_see request to index.php.

File Snapshot


 id: CVE-2022-34328

info:
  name: PMB 7.3.10 - Cross-Site Scripting
  author: edoardottt
  severity:

...

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.