.. / CVE-2023-30210

Exploit for OURPHP <= 7.2.0 - Cross Site Scripting (CVE-2023-30210)

Description:

OURPHP <= 7.2.0 is vulnerable to Cross Site Scripting (XSS) via /client/manage/ourphp_tz.php.

Nuclei Template

View the template here CVE-2023-30210.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2023/CVE-2023-30210.yaml
Copy

References:

https://nvd.nist.gov/vuln/detail/CVE-2023-30210
https://www.ourphp.net/
https://wanheiqiyihu.top/2023/03/27/OURPHP-v7-2-0-ourphp-tz-php-Reflection-xss/