CVE-2006-0210

Interspire TrackPoint NX < 0.1 - Cross-Site Scripting via Login Username Parameter

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2006-0210. PoCs published by M.Neset KABAKLI.

AI-analyzed exploit summary The provided text describes a cross-site scripting (XSS) vulnerability in TrackPoint NX versions less than 0.1. It explains the issue and provides a sample URL demonstrating the vulnerability, but does not include executable exploit code.

Description

Cross-site scripting (XSS) vulnerability in index.php in Interspire TrackPoint NX before 0.1 allows remote attackers to inject arbitrary web script or HTML via the username parameter when using the Login page.

Exploits (1)

exploitdb WRITEUP VERIFIED

by M.Neset KABAKLI · textwebappsphp

https://www.exploit-db.com/exploits/27070

View Code ZIP pw:eip

The provided text describes a cross-site scripting (XSS) vulnerability in TrackPoint NX versions less than 0.1. It explains the issue and provides a sample URL demonstrating the vulnerability, but does not include executable exploit code.

Classification

Writeup 90%

Attack Type

Xss

Complexity

Trivial

Reliability

Theoretical

Target: TrackPoint NX < 0.1

No auth needed

Prerequisites: A vulnerable version of TrackPoint NX · User interaction to trigger the XSS payload

MITRE ATT&CK