Exploitation Summary
EIP tracks 1 public exploit for CVE-2005-4555. PoCs published by [email protected].
AI-analyzed exploit summary This exploit demonstrates XSS vulnerabilities in Dev Web Management System by injecting malicious scripts into input parameters. The PoC shows how arbitrary JavaScript can be executed in the context of a user's session.
Description
Cross-site scripting (XSS) vulnerability in add.php in DEV web management system 1.5 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) ENTER_ARTICLE_TITLE, (2) SPECIFY_ZONE, (3) ENTER_ARTICLE_HEADER, and (4) ENTER_ARTICLE_BODY indices in the language array parameter.
Exploits (1)
This exploit demonstrates XSS vulnerabilities in Dev Web Management System by injecting malicious scripts into input parameters. The PoC shows how arbitrary JavaScript can be executed in the context of a user's session.