CVE-2006-2066

mkportal 1.1 Rc1 and earlier - Cross-Site Scripting via pm_popup.php Parameters

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2006-2066. PoCs published by HanowarS.

AI-analyzed exploit summary This exploit demonstrates a cross-site scripting (XSS) vulnerability in MKPortal by injecting arbitrary JavaScript code via the 'm1' parameter in the 'pmpopup.php' script. The PoC uses a simple alert to display the document cookie, proving the vulnerability.

Description

Multiple cross-site scripting (XSS) vulnerabilities pm_popup.php in MKPortal 1.1 Rc1 and earlier, as used with vBulletin 3.5.4 and earlier, allow remote attackers to inject arbitrary web script or HTML via the (1) u1, (2) m1, (3) m2, (4) m3, (5) m4 parameters.

Exploits (1)

exploitdb WORKING POC VERIFIED

by HanowarS · textwebappsphp

https://www.exploit-db.com/exploits/28716

View Code ZIP pw:eip

This exploit demonstrates a cross-site scripting (XSS) vulnerability in MKPortal by injecting arbitrary JavaScript code via the 'm1' parameter in the 'pmpopup.php' script. The PoC uses a simple alert to display the document cookie, proving the vulnerability.

Classification

Working Poc 90%

Attack Type

Xss

Complexity

Trivial

Reliability

Reliable

Target: MKPortal 1.1 R1 and previous versions

No auth needed

Prerequisites: Access to the vulnerable MKPortal instance

MITRE ATT&CK