Exploitation Summary
EIP tracks 3 public exploits for CVE-2007-0119. PoCs published by NetJackal.
AI-analyzed exploit summary The provided text describes a cross-site scripting (XSS) vulnerability in EditTag, where user-supplied input is not properly sanitized. The example URL demonstrates how an attacker could inject arbitrary script code into the browser context of an unsuspecting user.
Description
Multiple cross-site scripting (XSS) vulnerabilities in EditTag 1.2 allow remote attackers to inject arbitrary web script or HTML via the plain parameter to (1) mkpw_mp.cgi, (2) mkpw.pl, or (3) mkpw.cgi.
Exploits (3)
The provided text describes a cross-site scripting (XSS) vulnerability in EditTag, where user-supplied input is not properly sanitized. The example URL demonstrates how an attacker could inject arbitrary script code into the browser context of an unsuspecting user.
The provided text describes a cross-site scripting (XSS) vulnerability in EditTag, where user-supplied input is not properly sanitized. The example URL demonstrates how an attacker could inject arbitrary script code into the browser context of an unsuspecting user.
The provided text describes a cross-site scripting (XSS) vulnerability in EditTag, where user-supplied input is not properly sanitized. The example URL demonstrates how an attacker could inject arbitrary script code into the browser context of an unsuspecting user.