CVE-2006-1820

Modxcms - Cross-Site Scripting

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2006-1820. PoCs published by Rusydi Hasan.

AI-analyzed exploit summary The provided text describes a cross-site scripting (XSS) vulnerability in MODxCMS due to insufficient input sanitization. It outlines the potential impact and provides a generic example URL for exploitation.

Description

Cross-site scripting (XSS) vulnerability in index.php in ModX 0.9.1 allows remote attackers to inject arbitrary web script or HTML via the id parameter. NOTE: this might be resultant from the directory traversal vulnerability.

Exploits (1)

exploitdb WRITEUP VERIFIED

by Rusydi Hasan · textwebappsphp

https://www.exploit-db.com/exploits/27648

View Code ZIP pw:eip

The provided text describes a cross-site scripting (XSS) vulnerability in MODxCMS due to insufficient input sanitization. It outlines the potential impact and provides a generic example URL for exploitation.

Classification

Writeup 90%

Attack Type

Xss

Complexity

Trivial

Reliability

Theoretical

Target: MODxCMS (version not specified)

No auth needed

Prerequisites: Access to a vulnerable MODxCMS instance · Ability to craft a malicious URL with XSS payload

MITRE ATT&CK