CVE-2006-6479
AnnonceScriptHP 2.0 - Cross-Site Scripting via Email Parameter
Title source: llmExploitation Summary
EIP tracks 5 public exploits for CVE-2006-6479. PoCs published by Mr_KaLiMaN.
AI-analyzed exploit summary The provided text describes a vulnerability in AnnonceScriptHP V2.0, specifically mentioning SQL injection and XSS vulnerabilities due to insufficient input validation. It includes a sample URL demonstrating an XSS attack vector but lacks executable exploit code.
Description
Multiple cross-site scripting (XSS) vulnerabilities in AnnonceScriptHP 2.0 allow remote attackers to inject arbitrary web script or HTML via the email parameter in (1) erreurinscription.php, (2) Templates/admin.dwt.php, (3) Templates/commun.dwt.php, (4) membre.dwt.php, and (5) admin/admin_config/Aide.php.
Exploits (5)
The provided text describes a vulnerability in AnnonceScriptHP V2.0, specifically mentioning SQL injection and XSS vulnerabilities due to insufficient input validation. It includes a sample URL demonstrating an XSS attack vector but lacks executable exploit code.
The provided text describes a vulnerability in AnnonceScriptHP V2.0, specifically XSS and SQL injection issues due to insufficient input validation. It includes a sample URL demonstrating the XSS vulnerability but lacks executable exploit code.
The provided text describes a vulnerability in AnnonceScriptHP V2.0, specifically mentioning SQL injection and XSS vulnerabilities due to insufficient input validation. It includes a sample URL demonstrating an XSS attack vector but lacks executable exploit code.
The provided text describes a vulnerability in AnnonceScriptHP V2.0, specifically XSS and SQL injection issues due to insufficient input sanitization. It includes a sample URL demonstrating the XSS vulnerability but lacks executable exploit code.
The provided text describes a vulnerability in AnnonceScriptHP V2.0, specifically XSS and SQL injection due to insufficient input validation. It includes a sample URL for XSS exploitation but lacks actual exploit code.