CVE-2005-4490
SCOOP! < 2.3 - Cross-Site Scripting via Multiple Parameters
Title source: llmExploitation Summary
EIP tracks 7 public exploits for CVE-2005-4490. PoCs published by r0t3d3Vil.
AI-analyzed exploit summary The provided text describes a cross-site scripting (XSS) vulnerability in Commercial Interactive Media SCOOP! version 2.3. It explains the issue and provides an example URL demonstrating the vulnerability.
Description
Multiple cross-site scripting (XSS) vulnerabilities in SCOOP! 2.3 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) keyword and (2) invalid parameter to articleSearch.asp; (3) username and (4) invalid parameter to lostPassword.asp; (5) Username, (6) Password, and (7) invalid parameter to account_login.asp; (8) area, (9) articleZoneID, (10) r, and (11) invalid parameters to category.asp; and invalid parameters to (12) articleZone.asp, (13) prePurchaserRegistration.asp, and (14) requestDemo.asp.
Exploits (7)
The provided text describes a cross-site scripting (XSS) vulnerability in Commercial Interactive Media SCOOP! version 2.3. It explains the issue and provides an example URL demonstrating the vulnerability.
The provided text describes a cross-site scripting (XSS) vulnerability in Commercial Interactive Media SCOOP! version 2.3, where user-supplied input is not properly sanitized. The example URL demonstrates how an attacker could inject arbitrary script code into the 'example6' parameter.
The provided text describes a cross-site scripting (XSS) vulnerability in Commercial Interactive Media SCOOP! version 2.3, where user-supplied input is not properly sanitized. The example demonstrates how an attacker could inject arbitrary script code via the 'username' parameter in the 'lostPassword.asp' page.
The provided text describes multiple XSS vulnerabilities in Commercial Interactive Media SCOOP! version 2.3, detailing affected parameters and attack vectors. It does not contain executable exploit code but serves as a technical advisory.
The provided text describes a cross-site scripting (XSS) vulnerability in Commercial Interactive Media SCOOP! version 2.3. It explains the issue and provides a sample exploit URL but does not include executable code.
The provided text describes a cross-site scripting (XSS) vulnerability in Commercial Interactive Media SCOOP! version 2.3, where user-supplied input is not properly sanitized. The example URL demonstrates how an attacker could inject arbitrary script code via the 'keywords' parameter.
The provided text describes a cross-site scripting (XSS) vulnerability in Commercial Interactive Media SCOOP! version 2.3. It outlines the vulnerability's cause (lack of input sanitization) and potential impact (arbitrary script execution in a user's browser context).