CVE-2006-1943
IntelliLink Pro <= 5.06 - Cross-Site Scripting via URL Parameter in addlink_lwp.cgi and ID Parameters in edit.cgi
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2006-1943. PoCs published by r0t.
AI-analyzed exploit summary The provided text describes multiple cross-site scripting (XSS) vulnerabilities in IntelliLink Pro due to insufficient input sanitization. It includes example URLs demonstrating how an attacker could inject arbitrary script code.
Description
Multiple cross-site scripting (XSS) vulnerabilities in Smarter Scripts IntelliLink Pro 5.06 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) url parameter in addlink_lwp.cgi and the (2) id, (3) forgotid, and (4) forgotpass parameters in edit.cgi.
Exploits (2)
The provided text describes multiple cross-site scripting (XSS) vulnerabilities in IntelliLink Pro due to insufficient input sanitization. It includes example URLs demonstrating how an attacker could inject arbitrary script code.
The provided text describes a cross-site scripting (XSS) vulnerability in IntelliLink Pro, where user-supplied input is not properly sanitized. The example URL demonstrates how an attacker could inject arbitrary script code via the 'url' parameter.