Exploitation Summary
EIP tracks 2 public exploits for CVE-2006-5530. PoCs published by [email protected].
AI-analyzed exploit summary This exploit demonstrates a cross-site scripting (XSS) vulnerability in SimpNews by injecting arbitrary script code via unsanitized user input in the admin/pwlost.php endpoint. The PoC uses a crafted URL to trigger an alert dialog, proving the vulnerability.
Description
Multiple cross-site scripting (XSS) vulnerabilities in Boesch SimpNews before 2.34.01 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters to (1) admin/index.php, (2) admin/pwlost.php, and unspecified other files. NOTE: the provenance of this information is unknown; the details are obtained from third party information.
Exploits (2)
This exploit demonstrates a cross-site scripting (XSS) vulnerability in SimpNews by injecting arbitrary script code via unsanitized user input in the admin/pwlost.php endpoint. The PoC uses a crafted URL to trigger an alert dialog, proving the vulnerability.
This exploit demonstrates a cross-site scripting (XSS) vulnerability in SimpNews by injecting arbitrary JavaScript code via the 'vigilon' parameter in the admin interface. The vulnerability arises due to insufficient input sanitization.