CVE-2022-43097 PoC — User Management System 跨站脚本漏洞

Source

https://github.com/nibin-m/CVE-2022-43097

Associated Vulnerability

Title: User Management System 跨站脚本漏洞 (CVE-2022-43097)
Description:Phpgurukul User Registration & User Management System v3.0 was discovered to contain multiple stored cross-site scripting (XSS) vulnerabilities via the firstname and lastname parameters of the registration form & login pages.

Description

All details about CVE-2022-43097

Readme

# CVE-2022-43097
All details about CVE-2022-43097

Software: Phpgurukul User Registration & User Management System v3.0

Software Link: https://phpgurukul.com/user-registration-login-and-user-management-system-with-admin-panel/

Description: Phpgurukul User Registration & User Management System v3.0 was discovered to contain multiple stored cross-site scripting (XSS) vulnerabilities via the first name and last name parameters of the registration form & login pages.

Vulnerability Type: Stored Cross Site Scripting (XSS)

Affected Product Code Base: User Registration & Login and User Management System With admin panel

Affected Component: http://127.0.0.1/login.php, http://127.0.0.1/welcome.php

Attack Type: Remote

Attack Vectors: Malicious payload get saved on to the webserver as first name and last name.

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →