CVE-2006-2262

singapore 0.9.7 - Cross-Site Scripting via Image Parameter

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2006-2262. PoCs published by [email protected].

AI-analyzed exploit summary The exploit demonstrates a cross-site scripting (XSS) vulnerability in the 'singapore' application due to improper input sanitization. It provides example URLs that inject arbitrary script code via the 'image' parameter.

Description

Cross-site scripting (XSS) vulnerability in index.php in singapore 0.9.7 allows remote attackers to inject arbitrary web script or HTML via the image parameter.

Exploits (1)

exploitdb WORKING POC VERIFIED

by [email protected] · textwebappsphp

https://www.exploit-db.com/exploits/27824

View Code ZIP pw:eip

The exploit demonstrates a cross-site scripting (XSS) vulnerability in the 'singapore' application due to improper input sanitization. It provides example URLs that inject arbitrary script code via the 'image' parameter.

Classification

Working Poc 90%

Attack Type

Xss

Complexity

Trivial

Reliability

Reliable

Target: singapore application (version unspecified)

No auth needed

Prerequisites: Access to the vulnerable application · User interaction to trigger the payload

MITRE ATT&CK