CVE-2023-43876-October-CMS-Reflected-XSS---Installation

October CMS 反射型 XSS v3.4.16 作者：（Sergio） 描述： October v.3.4.16 安装过程中的跨站脚本（XSS）漏洞允许本地攻击者通过注入到 dbhost 字段的特制载荷执行任意 Web 脚本。 攻击向量： dbhost 字段的输入清理存在漏洞，允许注入 JavaScript 代码。 POC： 在安装过程中，我们在 dbhost 字段中输入 XSS 载荷，当我们点击“下一步”时，将触发 XSS 弹窗。 XSS 载荷： root@kitploit: '" 在下图中，您可以看到在安装过程中执行载荷的嵌入代码。 附加信息：...

CVE-2023-43876

A Cross-Site Scripting XSS vulnerability in installation of October v.3.4.16 allows an attacker to execute arbitrary web scripts via a crafted payload injected into the dbhost field...

EUVD-2023-2393

Malicious code in bioql PyPI...

CVE-2023-43876

A Cross-Site Scripting XSS vulnerability in installation of October v.3.4.16 allows an attacker to execute arbitrary web scripts via a crafted payload injected into the dbhost field...

CVE-2023-43876

A Cross-Site Scripting XSS vulnerability in installation of October v.3.4.16 allows an attacker to execute arbitrary web scripts via a crafted payload injected into the dbhost field...

CVE-2023-43876

A Cross-Site Scripting XSS vulnerability in installation of October v.3.4.16 allows an attacker to execute arbitrary web scripts via a crafted payload injected into the dbhost field...

Cross site scripting

A Cross-Site Scripting XSS vulnerability in installation of October v.3.4.16 allows an attacker to execute arbitrary web scripts via a crafted payload injected into the dbhost field...

CVE-2023-43876

A Cross-Site Scripting XSS vulnerability in installation of October v.3.4.16 allows an attacker to execute arbitrary web scripts via a crafted payload injected into the dbhost field...

October CMS Cross-Site Scripting Vulnerability

October CMS is an open source content management system CMS based on PHP and the Laravel web application framework. A cross-site scripting vulnerability exists in October CMS version v.3.4.16. An attacker can exploit this vulnerability to execute arbitrary web script by injecting a specially...