CVE-2006-0350

eggblog 2.0 - Cross-Site Scripting via Topic Message Field

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2006-0350. PoCs published by [email protected].

AI-analyzed exploit summary The provided text describes multiple input validation vulnerabilities in Eggblog, specifically highlighting XSS via the 'message' parameter in topic.php. It lacks executable exploit code but outlines potential attack vectors.

Description

Cross-site scripting (XSS) vulnerability in eggblog 2.0 allow remote attackers to inject arbitrary web script or HTML via the message field to topic.php.

Exploits (1)

exploitdb WRITEUP VERIFIED

by [email protected] · textwebappsphp

https://www.exploit-db.com/exploits/27111

View Code ZIP pw:eip

The provided text describes multiple input validation vulnerabilities in Eggblog, specifically highlighting XSS via the 'message' parameter in topic.php. It lacks executable exploit code but outlines potential attack vectors.

Classification

Writeup 80%

Attack Type

Xss

Complexity

Trivial

Reliability

Theoretical

Target: Eggblog (version unspecified)

No auth needed

Prerequisites: Access to the vulnerable Eggblog forum page

MITRE ATT&CK