CVE-2002-1480
phpgb - Stored Cross-Site Scripting via Guestbook Entry Deletion
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2002-1480. PoCs published by ppp-design.
AI-analyzed exploit summary This exploit demonstrates an HTML injection vulnerability in phpGB, allowing an attacker to inject malicious script code into guestbook entries. The script executes in the context of the administrative user's browser when they attempt to delete the entry.
Description
Cross-site scripting (XSS) vulnerability in phpGB before 1.20 allows remote attackers to inject arbitrary HTML or script into guestbook pages, which is executed when the administrator deletes the entry.
Exploits (1)
This exploit demonstrates an HTML injection vulnerability in phpGB, allowing an attacker to inject malicious script code into guestbook entries. The script executes in the context of the administrative user's browser when they attempt to delete the entry.