CVE-2006-1157

ADP Forum 2.0.3 - Stored Cross-Site Scripting via Subject Field

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2006-1157. PoCs published by liz0.

AI-analyzed exploit summary This exploit demonstrates an HTML injection vulnerability in ADP Forum 2.0.3 and prior. The provided payload redirects users to a malicious site via a script tag, leveraging improper input sanitization.

Description

Cross-site scripting (XSS) vulnerability in Vz Scripts ADP Forum 2.0.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the Subject field (possibly messaggio parameter) when posting a new message in post.php.

Exploits (1)

exploitdb WORKING POC VERIFIED

by liz0 · textwebappsphp

https://www.exploit-db.com/exploits/27379

View Code ZIP pw:eip

This exploit demonstrates an HTML injection vulnerability in ADP Forum 2.0.3 and prior. The provided payload redirects users to a malicious site via a script tag, leveraging improper input sanitization.

Classification

Working Poc 90%

Attack Type

Xss

Complexity

Trivial

Reliability

Reliable

Target: ADP Forum <= 2.0.3

No auth needed

Prerequisites: Access to a vulnerable ADP Forum instance · Ability to submit crafted input (e.g., via forum post or subject field)

MITRE ATT&CK