CVE-2006-4747

IdevSpot TextAds - Cross-Site Scripting via id Parameter in delete.php and error Parameter in error.php

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 2 public exploits for CVE-2006-4747. PoCs published by s3rv3r_hack3r.

AI-analyzed exploit summary The provided text describes a cross-site scripting (XSS) vulnerability in TextAds, where user-supplied input is not properly sanitized. The example URL demonstrates how an attacker could inject arbitrary script code into the 'error' parameter.

Description

Multiple cross-site scripting (XSS) vulnerabilities in IdevSpot TextAds allow remote attackers to inject arbitrary web script or HTML via (1) the id parameter in delete.php and (2) the error parameter in error.php.

Exploits (2)

exploitdb WRITEUP VERIFIED
by s3rv3r_hack3r · textwebappsphp
https://www.exploit-db.com/exploits/28503

The provided text describes a cross-site scripting (XSS) vulnerability in TextAds, where user-supplied input is not properly sanitized. The example URL demonstrates how an attacker could inject arbitrary script code into the 'error' parameter.

Classification
Writeup 90%
Attack Type
Xss
Complexity
Trivial
Reliability
Theoretical
Target: TextAds (version not specified)
No auth needed
Prerequisites: Access to a vulnerable TextAds installation · Ability to craft a malicious URL
MITRE ATT&CK
devstral-2 · analyzed Feb 16, 2026 Full analysis →
exploitdb WRITEUP VERIFIED
by s3rv3r_hack3r · textwebappsphp
https://www.exploit-db.com/exploits/28502

The provided text describes a cross-site scripting (XSS) vulnerability in TextAds, where the application fails to sanitize user-supplied input. The example URL demonstrates how an attacker could inject arbitrary script code via the 'id' parameter in the 'delete.php' script.

Classification
Writeup 90%
Attack Type
Xss
Complexity
Trivial
Reliability
Theoretical
Target: TextAds (version not specified)
No auth needed
Prerequisites: Access to the vulnerable TextAds application
MITRE ATT&CK
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (3)

Core 3
Core References
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/445745/100/0/threaded
Exploit vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/19932
Third Party Advisory third-party-advisory x_refsource_sreason
http://securityreason.com/securityalert/1567

Scores

EPSS 0.0166
EPSS Percentile 73.6%

Details

Status published
Products (1)
idevspot/textads
Published Sep 13, 2006
Tracked Since Feb 18, 2026