CVE-2007-2337

This exploit demonstrates a reflected XSS vulnerability in Exponent CMS by injecting a malicious script via the 'rss_url' parameter in magpie_slashbox.php. The script executes in the context of the user's browser, potentially stealing cookie-based authentication credentials.

The provided text describes a reflected XSS vulnerability in Exponent CMS via the 'url' parameter in magpie_debug.php. It lacks executable exploit code but includes a proof-of-concept URL demonstrating the issue.