CVE-2023-44811 PoC — MooSocial 跨站请求伪造漏洞

Source

https://github.com/ahrixia/CVE-2023-44811

Associated Vulnerability

Title:MooSocial 跨站请求伪造漏洞 (CVE-2023-44811)
Description:mooSocial是mooSocial公司的一个多平台、移动就绪、用户友好的脚本。用于构建社区驱动的内容共享和社交网络网站。 MooSocial v.3.1.8版本存在安全漏洞。攻击者利用该漏洞通过管理员密码更改功能执行任意代码并获取敏感信息。

Description

mooSocial v3.1.8 is vulnerable to Cross Site Request Forgery (CSRF) which allows attacker to change admin password.

Readme

# CVE-2023-44811
mooSocial v3.1.8 is vulnerable to Cross Site Request Forgery (CSRF) which allows attacker to change admin password once an authenticated admin user clicks on the malicious crafted HTML page.

I am providing 2 HTML Pages which will when clicked by an authenticated admin user will change their password.

File Snapshot


 [4.0K]  /data/pocs/e5b1b687fd268e4e8e8521362a08d97f48dbbb23
├── [ 589]  poc-click.html
├── [ 635]  poc-non-interactive.html
└── [ 320]  README.md

0 directories, 3 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!