CVE-2006-2423

Confixx 3.1.2 - Cross-Site Scripting via ftplogin/index.php login parameter

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2006-2423. PoCs published by LoK-Crew.

AI-analyzed exploit summary This exploit demonstrates a cross-site scripting (XSS) vulnerability in Confixx due to improper input sanitization. The PoC provides a URL that, when accessed, executes arbitrary script code in the context of the affected site.

Description

Cross-site scripting (XSS) vulnerability in ftplogin/index.php in Confixx 3.1.2 allows remote attackers to inject arbitrary web script or HTML via the login parameter.

Exploits (1)

exploitdb WORKING POC VERIFIED

by LoK-Crew · textwebappsphp

https://www.exploit-db.com/exploits/27884

View Code ZIP pw:eip

This exploit demonstrates a cross-site scripting (XSS) vulnerability in Confixx due to improper input sanitization. The PoC provides a URL that, when accessed, executes arbitrary script code in the context of the affected site.

Classification

Working Poc 90%

Attack Type

Xss

Complexity

Trivial

Reliability

Reliable

Target: Confixx (version not specified)

No auth needed

Prerequisites: Access to a vulnerable Confixx installation · Ability to craft a malicious URL

MITRE ATT&CK