CVE-2005-1053
ModernBill < 4.3.0 - Cross-Site Scripting via orderwiz.php c_code or aid Parameters
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2005-1053. PoCs published by GulfTech Security.
AI-analyzed exploit summary The provided text describes a cross-site scripting (XSS) vulnerability in ModernBill 4.3 and prior versions due to improper sanitization of the 'c_code' parameter. The example URL demonstrates how an attacker could inject malicious scripts via the 'c_code' parameter.
Description
Multiple cross-site scripting (XSS) vulnerabilities in orderwiz.php in ModernBill 4.3.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) c_code or (2) aid parameters.
Exploits (2)
The provided text describes a cross-site scripting (XSS) vulnerability in ModernBill 4.3 and prior versions due to improper sanitization of the 'c_code' parameter. The example URL demonstrates how an attacker could inject malicious scripts via the 'c_code' parameter.
The provided text describes a cross-site scripting (XSS) vulnerability in ModernBill 4.3 and prior versions due to improper sanitization of the 'aid' parameter in the 'orderwiz.php' script. The vulnerability allows attackers to inject malicious scripts via the 'aid' parameter, potentially leading to cookie theft or other client-side attacks.