CVE-2023-1880 PoC — phpMyFAQ 跨站脚本漏洞

Source

https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-1880.yaml

Associated Vulnerability

Title:phpMyFAQ 跨站脚本漏洞 (CVE-2023-1880)
Description:phpMyFAQ是Thorsten Rinne个人开发者的一个多语言、完全由数据库驱动的常见问题解答系统。 phpMyFAQ 3.1.12之前版本存在跨站脚本漏洞，该漏洞源于存在反射型跨站脚本（XSS）漏洞。

Description

Phpmyfaq v3.1.11 is vulnerable to reflected XSS in send2friend because the 'artlang' parameter is not sanitized.

File Snapshot


 id: CVE-2023-1880

info:
  name: Phpmyfaq v3.1.11 - Cross-Site Scripting
  author: r3Y3r53
  severit

...

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!