CVE-2006-1427
WebAPP <= 0.9.9.3.2 - Cross-Site Scripting via Multiple CGI Parameters
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2006-1427. PoCs published by r0t.
AI-analyzed exploit summary The provided text describes multiple XSS vulnerabilities in Web-App.Org and Web-App.Net due to insufficient input sanitization. It lists various URLs with vulnerable parameters that can be exploited to execute arbitrary script code in a user's browser context.
Description
Multiple cross-site scripting (XSS) vulnerabilities in WebAPP 0.9.9.3.2 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) action, (2) id, (3) num, (4) board, (5) cat, (6) real, (7) viewcat, (8) img, or (9) curcatname parameter in cgi-bin/index.cgi, or (10) vsSD parameter in /mods/calendar/index.cgi.
Exploits (2)
The provided text describes multiple XSS vulnerabilities in Web-App.Org and Web-App.Net due to insufficient input sanitization. It lists various URLs with vulnerable parameters that can be exploited to execute arbitrary script code in a user's browser context.
The provided text describes a cross-site scripting (XSS) vulnerability in Web-App.Org and Web-App.Net due to improper input sanitization. It includes an example URL demonstrating the vulnerability but lacks executable exploit code.