CVE-2006-6919
Sage < 1.3.8 - Remote Code Execution via Malicious RSS Feed img Tag
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2006-6919. PoCs published by pdp.
AI-analyzed exploit summary This exploit demonstrates a cross-site scripting (XSS) vulnerability in Sage by injecting malicious JavaScript code into an RSS feed. The script attempts to read local files (e.g., C:/boot.ini or /etc/passwd) via XMLHttpRequest and display their contents in an alert, showcasing the potential for local file disclosure.
Description
Firefox Sage extension 1.3.8 and earlier allows remote attackers to execute arbitrary Javascript in the local context via an RSS feed with an img tag containing the script followed by an extra trailing ">", which Sage modifies to close the img element before the malicious script.
Exploits (1)
This exploit demonstrates a cross-site scripting (XSS) vulnerability in Sage by injecting malicious JavaScript code into an RSS feed. The script attempts to read local files (e.g., C:/boot.ini or /etc/passwd) via XMLHttpRequest and display their contents in an alert, showcasing the potential for local file disclosure.