CVE-2006-5661

VIRtech Netquery - Cross-Site Scripting via User-Agent HTTP Header

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2006-5661. PoCs published by Tal Argoni.

AI-analyzed exploit summary This exploit demonstrates a cross-site scripting (XSS) vulnerability in Netquery by injecting a malicious script into the User-Agent header. The vulnerability arises due to insufficient input sanitization, allowing arbitrary script execution in the context of the affected site.

Description

Cross-site scripting (XSS) vulnerability in nquser.php in VIRtech Netquery allows remote attackers to inject arbitrary web script or HTML via the User-Agent HTTP header.

Exploits (1)

exploitdb WORKING POC VERIFIED

by Tal Argoni · textwebappsphp

https://www.exploit-db.com/exploits/28889

View Code ZIP pw:eip

This exploit demonstrates a cross-site scripting (XSS) vulnerability in Netquery by injecting a malicious script into the User-Agent header. The vulnerability arises due to insufficient input sanitization, allowing arbitrary script execution in the context of the affected site.

Classification

Working Poc 90%

Attack Type

Xss

Complexity

Trivial

Reliability

Reliable

Target: Netquery (version not specified)

No auth needed

Prerequisites: Access to the target application · Ability to send crafted HTTP requests

MITRE ATT&CK