CVE-2023-30212 PoC — OURPHP 跨站脚本漏洞

Source

https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-30212.yaml

Associated Vulnerability

Title:OURPHP 跨站脚本漏洞 (CVE-2023-30212)
Description:OURPHP是OURPHP开源的一个开源、跨平台、企业级+电商+小程序+APP多终端同步的CMS建站系统。 OURPHP 7.2.0版本及之前版本存在安全漏洞，该漏洞源于通过文件ourphp_out.php发现包含跨站脚本（XSS）漏洞。

Description

OURPHP <= 7.2.0 is vulnerale to Cross Site Scripting (XSS) via /client/manage/ourphp_out.php.

File Snapshot


 id: CVE-2023-30212

info:
  name: OURPHP <= 7.2.0 -  Cross Site Scripting
  author: theamanrawat
  s

...

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!