CVE-2006-5512

The exploit demonstrates a reflected XSS vulnerability in Zwahlen's Online Shop by injecting a script tag into the 'cat' parameter of the 'article.htm' URL. The lack of input sanitization allows arbitrary JavaScript execution in the context of the affected site.

The exploit demonstrates a directory traversal vulnerability in INCA IM-204 devices, allowing unauthenticated attackers to access sensitive files like /etc/passwd, /etc/shadow, and configuration files via malformed input in the 'getpage' parameter.