.. / CVE-2023-44012

Exploit for mojoPortal v.2.7.0.0 - Cross-Site Scripting (CVE-2023-44012)

Description:

Cross Site Scripting vulnerability in mojoPortal v.2.7.0.0 allows a remote attacker to execute arbitrary code via the helpkey parameter in the Help.aspx component.

Nuclei Template

View the template here CVE-2023-44012.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2023/CVE-2023-44012.yaml
Copy

References:

https://github.com/Vietsunshine-Electronic-Solution-JSC/Vulnerability-Disclosures/tree/main/2023/CVE-2023-44012
https://github.com/fkie-cad/nvd-json-data-feeds
https://nvd.nist.gov/vuln/detail/CVE-2023-44012