CVE-2023-46450 PoC — Inventory Management System 跨站脚本漏洞

Source

https://github.com/yte121/-CVE-2023-46450

Associated Vulnerability

Title: Inventory Management System 跨站脚本漏洞 (CVE-2023-46450)
Description:Sourcecodester Free and Open Source inventory management system 1.0 is vulnerable to Cross Site Scripting (XSS) via the Add supplier function.

Description

 CVE-2023-46450 reference

Readme

# -CVE-2023-46450

> [Description]
> Sourcecodester Free and Open Source inventory management system 1.0 is
> vulnerable to Cross Site Scripting (XSS) via the Add supplier function.
>
> ------------------------------------------
>
> [Additional Information]
> A video POC stored XSS vulnerability exists in the add supplier functionality in free and open source inventory management system.
> Link:  https://youtu.be/LQy0_xIK2q0
>
> ------------------------------------------
>
> [Vulnerability Type]
> Cross Site Scripting (XSS)
>
> ------------------------------------------
>
> [Vendor of Product]
> opensource
>
> ------------------------------------------
>
> [Affected Product Code Base]
> free-and-open-source-inventory-management-system-php-source-code - 1.0000
>
> ------------------------------------------
>
> [Affected Component]
> Add supplier functionality
>
> ------------------------------------------
>
> [Attack Type]
> Remote
>
> ------------------------------------------
>
> [Impact Code execution]
> true
>
> ------------------------------------------
>
> [Attack Vectors]
> Authenticated Stored XSS
>
> ------------------------------------------
>
> [Reference]
> https://youtu.be/LQy0_xIK2q0
>
> ------------------------------------------
>
> [Discoverer]
> Yagyesh K. Tiwari

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →