CVE-2018-11473 PoC — Monstra CMS 跨站脚本漏洞

Source

https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-11473.yaml

Associated Vulnerability

Title: Monstra CMS 跨站脚本漏洞 (CVE-2018-11473)
Description:Monstra CMS 3.0.4 has XSS in the registration Form (i.e., the login parameter to users/registration).

Description

Monstra CMS 3.0.4 contains a cross-site scripting vulnerability via the registration form (i.e., the login parameter to users/registration). An attacker can inject arbitrary script in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication credentials and launch other attacks.

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →