Exploitation Summary
EIP tracks 1 public exploit for CVE-2006-1230. PoCs published by Linux_Drox.
AI-analyzed exploit summary The exploit demonstrates multiple XSS vulnerabilities in vCard by injecting arbitrary script code via unsanitized input parameters in the URL. The PoC uses simple JavaScript alerts to prove the vulnerability.
Description
Multiple cross-site scripting (XSS) vulnerabilities in create.php in vCard 2.x allow remote attackers to inject arbitrary web script or HTML via the (1) card_id, (2) uploaded, (3) card_fontsize, or (4) card_color parameter. NOTE: the card_id vector was later reported to affect vCard 2.9, and the uploaded vector for 2.6.
Exploits (1)
The exploit demonstrates multiple XSS vulnerabilities in vCard by injecting arbitrary script code via unsanitized input parameters in the URL. The PoC uses simple JavaScript alerts to prove the vulnerability.