CVE-2006-3883
Gonafish LinksCaffe 3.0 - Cross-Site Scripting via Multiple Parameters
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2006-3883. PoCs published by simo64.
AI-analyzed exploit summary The provided text describes multiple input-validation vulnerabilities in LinksCaffe, including XSS and SQL injection, but does not contain actual exploit code. It lists example URLs demonstrating XSS vectors.
Description
Multiple cross-site scripting (XSS) vulnerabilities in Gonafish LinksCaffe 3.0 allow remote attackers to inject arbitrary web script or HTML via (1) the tablewidth parameter in (a) counter.php; (2) the newdays parameter in (b) links.php; and the (3) tableborder, (4) menucolor, (5) textcolor, and (6) bodycolor parameters in (c) menu.inc.php.
Exploits (3)
The provided text describes multiple input-validation vulnerabilities in LinksCaffe, including XSS and SQL injection, but does not contain actual exploit code. It lists example URLs demonstrating XSS vectors.
The provided text describes multiple input-validation vulnerabilities in LinksCaffe, including XSS and SQL injection, but does not contain actual exploit code. It references a generic example URL for XSS exploitation.
The exploit demonstrates an XSS vulnerability in LinksCaffe by injecting malicious input into the 'tablewidth' parameter of counter.php. The lack of input sanitization allows arbitrary script execution in the context of the victim's browser.