CVE-2022-3766 PoC — phpMyFAQ 跨站脚本漏洞

Source

https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-3766.yaml

Associated Vulnerability

Title:phpMyFAQ 跨站脚本漏洞 (CVE-2022-3766)
Description:phpMyFAQ是Thorsten Rinne个人开发者的一个多语言、完全由数据库驱动的常见问题解答系统。 phpMyFAQ 3.1.8之前版本存在安全漏洞，该漏洞源于存在跨站脚本(XSS)。

Description

phpMyFAQ versions prior to 3.1.8 contain a reflected cross-site scripting vulnerability in the search functionality. The application fails to properly sanitize user input in the search parameter, allowing attackers to inject and execute malicious JavaScript code in the context of other users' browsers.

File Snapshot


 id: CVE-2022-3766

info:
  name: phpMyFAQ < 3.1.8 - Cross-Site Scripting
  author: ritikchaddha
  se

...

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!