CVE-2005-3237

Cyphor 0.19 - Cross-Site Scripting via t_login Parameter

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2005-3237. PoCs published by [email protected].

AI-analyzed exploit summary This exploit demonstrates a cross-site scripting (XSS) vulnerability in Cyphor's footer.php file. The vulnerability allows arbitrary JavaScript execution via the t_login parameter, potentially leading to cookie theft or other client-side attacks.

Description

Cross-site scripting (XSS) vulnerability in Cyphor 0.19 allows remote attackers to inject arbitrary web script or HTML via the t_login parameter of footer.php.

Exploits (1)

exploitdb WORKING POC VERIFIED

by [email protected] · textwebappsphp

https://www.exploit-db.com/exploits/26339

View Code ZIP pw:eip

This exploit demonstrates a cross-site scripting (XSS) vulnerability in Cyphor's footer.php file. The vulnerability allows arbitrary JavaScript execution via the t_login parameter, potentially leading to cookie theft or other client-side attacks.

Classification

Working Poc 90%

Attack Type

Xss

Complexity

Trivial

Reliability

Reliable

Target: Cyphor (version not specified)

No auth needed

Prerequisites: Access to the vulnerable endpoint

MITRE ATT&CK