Exploitation Summary
EIP tracks 2 public exploits for CVE-2004-0672. PoCs published by [email protected].
AI-analyzed exploit summary This exploit demonstrates a cross-site scripting (XSS) vulnerability in Netegrity IdentityMinder by crafting a malicious URL that injects JavaScript code into the application's web interface. The vulnerability arises from insufficient input sanitization of URI parameters, allowing arbitrary script execution in the context of the victim's browser.
Description
Multiple cross-site scripting (XSS) vulnerabilities in the primary and management web interfaces in Netegrity IdentityMinder Web Edition 5.6 allows remote attackers to execute script as other users via (1) script that starts with %00 in the numOfExpressions parameter or (2) the mobjtype parameter.
Exploits (2)
This exploit demonstrates a cross-site scripting (XSS) vulnerability in Netegrity IdentityMinder by crafting a malicious URL that injects JavaScript code into the application's web interface. The vulnerability arises from insufficient input sanitization of URI parameters, allowing arbitrary script execution in the context of the victim's browser.
The provided text describes a cross-site scripting (XSS) vulnerability in Netegrity IdentityMinder, where user-supplied URI input is not properly sanitized. An example exploit URI is included to demonstrate the vulnerability.