Exploitation Summary
EIP tracks 1 public exploit for CVE-2006-6779. PoCs published by Ashraf Morad.
AI-analyzed exploit summary This exploit demonstrates a cross-site scripting (XSS) vulnerability in vBulletin by leveraging a malicious SWF file to inject JavaScript. The script steals cookie-based authentication credentials by appending a dynamically created script tag that exfiltrates the document.cookie to a remote server.
Description
Cross-site scripting (XSS) vulnerability in Jelsoft vBulletin allows remote attackers to inject arbitrary web script or HTML via an SWF file that uses ActionScript to trigger execution of JavaScript.
Exploits (1)
This exploit demonstrates a cross-site scripting (XSS) vulnerability in vBulletin by leveraging a malicious SWF file to inject JavaScript. The script steals cookie-based authentication credentials by appending a dynamically created script tag that exfiltrates the document.cookie to a remote server.