Exploitation Summary
EIP tracks 4 public exploits for CVE-2005-4880. PoCs published by Lostmon.
AI-analyzed exploit summary The provided text describes a cross-site scripting (XSS) vulnerability in Jax PHP Scripts due to insufficient input sanitization. It references a specific log file path but does not include executable exploit code.
Description
Jax Guestbook 3.1 and 3.31 stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain IP addresses of users via a direct request to (1) guestbook, (2) guestbook_ips2block, (3) ips2block, and (4) formmailer/logfile.csv.
Exploits (4)
The provided text describes a cross-site scripting (XSS) vulnerability in Jax PHP Scripts due to insufficient input sanitization. It references a specific log file path but does not include executable exploit code.
The provided text describes a cross-site scripting (XSS) vulnerability in Jax PHP Scripts, specifically in the guestbook component. It lacks executable exploit code but references a known CVE and explains the vulnerability's impact.
The provided text describes a cross-site scripting (XSS) vulnerability in Jax PHP Scripts, specifically in the guestbook component. It lacks executable exploit code but references a known CVE and explains the vulnerability's impact.
The provided text describes a cross-site scripting (XSS) vulnerability in Jax PHP Scripts, specifically in the guestbook module, due to insufficient input sanitization. It outlines the potential impact but does not include functional exploit code.