CVE-2006-1120

This exploit demonstrates multiple XSS vulnerabilities in DCP Portal by injecting malicious scripts into various parameters of the 'mycontents.php' file. The scripts redirect the user's cookies to an attacker-controlled server.

This exploit demonstrates multiple XSS vulnerabilities in DCP Portal by injecting malicious scripts via the 'subject_color' and 'email' parameters in the lostpassword.php page. The scripts redirect users to a malicious site to steal cookies.

This exploit demonstrates multiple XSS vulnerabilities in DCP Portal by injecting malicious JavaScript via the 'its_url' and 'url' parameters. The PoC redirects the victim's browser to a malicious site while exfiltrating cookie data.

This exploit demonstrates multiple XSS vulnerabilities in DCP Portal by injecting malicious JavaScript into form inputs, which can steal cookies when executed in a victim's browser.

This exploit demonstrates multiple XSS vulnerabilities in DCP Portal by injecting malicious scripts into various input fields, leading to cookie theft. The PoC includes both GET and POST-based attack vectors.

This exploit demonstrates multiple XSS vulnerabilities in DCP Portal's calendar.php by injecting malicious scripts via unsanitized parameters like subject_color, images, day, and year. The scripts redirect users to a malicious site to steal cookies.