CVE-2007-2013

JEx-Treme Einfacher Passworschutz - Cross-Site Scripting via msg Parameter

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2007-2013. PoCs published by hackberry.

AI-analyzed exploit summary The provided text describes a cross-site scripting (XSS) vulnerability in Einfacher Passworschutz, where user-supplied input is not properly sanitized. An attacker can exploit this by injecting arbitrary script code via the 'msg' parameter in the URL.

Description

Cross-site scripting (XSS) vulnerability in index.php in JEx-Treme Einfacher Passworschutz allows remote attackers to inject arbitrary web script or HTML via the msg parameter.

Exploits (1)

exploitdb WRITEUP VERIFIED

by hackberry · textwebappsphp

https://www.exploit-db.com/exploits/29829

View Code ZIP pw:eip

The provided text describes a cross-site scripting (XSS) vulnerability in Einfacher Passworschutz, where user-supplied input is not properly sanitized. An attacker can exploit this by injecting arbitrary script code via the 'msg' parameter in the URL.

Classification

Writeup 90%

Attack Type

Xss

Complexity

Trivial

Reliability

Reliable

Target: Einfacher Passworschutz

No auth needed

Prerequisites: Access to the vulnerable application URL

MITRE ATT&CK