Exploitation Summary
EIP tracks 2 public exploits for CVE-2006-2986. PoCs published by Luny.
AI-analyzed exploit summary The provided text describes a cross-site scripting (XSS) vulnerability in vsREAL and vSCAL applications due to improper input sanitization. It includes an example URL demonstrating how arbitrary script code can be executed in the context of the affected site.
Description
Multiple cross-site scripting (XSS) vulnerabilities in Baby Katie Media (a) very Simple Car Lister (vSCAL) 1.0 and (b) very simple Realty Lister (vsREAL) 1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) lid parameter in index.php and the (2) title parameter in myslideshow.php.
Exploits (2)
The provided text describes a cross-site scripting (XSS) vulnerability in vsREAL and vSCAL applications due to improper input sanitization. It includes an example URL demonstrating how arbitrary script code can be executed in the context of the affected site.
The provided text describes a cross-site scripting (XSS) vulnerability in vsREAL and vSCAL applications due to improper input sanitization. It includes an example URL demonstrating the exploit but lacks executable code.