CVE-2005-1803
Net Portal Dynamic System 5.0 - Cross-Site Scripting via Multiple Parameters
Title source: llmExploitation Summary
EIP tracks 6 public exploits for CVE-2005-1803. PoCs published by NoSP.
AI-analyzed exploit summary The provided text describes multiple vulnerabilities in NPDS, including XSS and SQL injection, with an example XSS payload. However, it lacks executable exploit code.
Description
Multiple cross-site scripting (XSS) vulnerabilities in Net Portal Dynamic System (NPDS) 5.0 allow remote attackers to inject arbitrary web script or HTML via the language parameter to (1) admin.php, or (2) powerpack_f.php, (3) the sitename parameter to sdv_infos.php, (4) the categories parameter to faq.php, (5) the lettre parameter to the glossaire module, (6) the title parameter to reviews.php, or (7) the image_subject parameter to reply.php.
Exploits (6)
The provided text describes multiple vulnerabilities in NPDS, including XSS and SQL injection, with an example XSS payload. However, it lacks executable exploit code.
The provided text describes multiple vulnerabilities in NPDS, including HTML injection, XSS, and SQL injection, with an example XSS payload. It lacks executable exploit code but outlines attack vectors.
This exploit demonstrates an XSS vulnerability in NPDS by injecting a malicious script via the 'image_subject' parameter in the 'reply.php' endpoint. The PoC shows how an attacker can execute arbitrary JavaScript in the context of a victim's browser session.
The provided text describes multiple vulnerabilities in NPDS, including HTML injection, XSS, and SQL injection, with an example XSS payload. It lacks executable exploit code but outlines attack vectors.
The provided text describes a vulnerability in NPDS involving HTML injection, XSS, and SQL injection due to input validation errors. It includes a sample XSS payload but lacks executable exploit code.
The provided text describes multiple vulnerabilities in NPDS, including HTML injection, XSS, and SQL injection, with an example XSS payload. It lacks executable exploit code but outlines attack vectors.