CVE-2004-1844
Member Management System 2.1 - Cross-Site Scripting via Error Parameter or Register Page
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2004-1844. PoCs published by Manuel Lopez.
AI-analyzed exploit summary The provided text describes a cross-site scripting (XSS) vulnerability in Member Management System version 2.1, specifically in the 'err' parameter of 'error.asp' and the 'register.asp' script. It includes an example payload demonstrating how an attacker could inject malicious HTML/iframe code.
Description
Cross-site scripting (XSS) vulnerability in Member Management System 2.1 allows remote attackers to inject arbitrary web script or HTML via (1) the err parameter to error.asp or (2) register.asp.
Exploits (2)
The provided text describes a cross-site scripting (XSS) vulnerability in Member Management System version 2.1, specifically in the 'err' parameter of 'error.asp' and the 'register.asp' script. It includes an example payload demonstrating how an attacker could inject malicious HTML/iframe code.
The provided text describes a cross-site scripting (XSS) vulnerability in Member Management System version 2.1, specifically in the 'err' parameter of 'error.asp' and the 'register.asp' script. It lacks executable exploit code but includes a proof-of-concept URL demonstrating the vulnerability.