CVE-2005-2855

Unclassified NewsBoard 1.5.3 - Stored Cross-Site Scripting via Description Field

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2005-2855. PoCs published by [email protected].

AI-analyzed exploit summary This exploit demonstrates an HTML injection vulnerability in Unclassified NewsBoard due to insufficient input sanitization. Attackers can inject arbitrary HTML/script code into the description field, leading to XSS attacks.

Description

Cross-site scripting (XSS) vulnerability in Unclassified NewsBoard 1.5.3 allows remote attackers to inject arbitrary web script or HTML via the description field.

Exploits (1)

exploitdb WORKING POC VERIFIED

by [email protected] · textwebappsphp

https://www.exploit-db.com/exploits/26224

View Code ZIP pw:eip

This exploit demonstrates an HTML injection vulnerability in Unclassified NewsBoard due to insufficient input sanitization. Attackers can inject arbitrary HTML/script code into the description field, leading to XSS attacks.

Classification

Working Poc 90%

Attack Type

Xss

Complexity

Trivial

Reliability

Reliable

Target: Unclassified NewsBoard

No auth needed

Prerequisites: Access to the 'post new message' functionality

MITRE ATT&CK