Exploitation Summary
EIP tracks 2 public exploits for CVE-2007-2532. PoCs published by CorryL.
AI-analyzed exploit summary The provided text describes a cross-site scripting (XSS) vulnerability in Mini Web Shop 2, where insufficient input sanitization in the sendmail.php module allows attackers to inject malicious scripts. The advisory references a specific URL path but lacks executable exploit code.
Description
Multiple cross-site scripting (XSS) vulnerabilities in Minh Nguyen Duong Obie Website Mini Web Shop 2 allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO (query string) to (1) sendmail.php or (2) order_form.php, different vectors than CVE-2006-6734.
Exploits (2)
The provided text describes a cross-site scripting (XSS) vulnerability in Mini Web Shop 2, where insufficient input sanitization in the sendmail.php module allows attackers to inject malicious scripts. The advisory references a specific URL path but lacks executable exploit code.
The provided text describes a cross-site scripting (XSS) vulnerability in Mini Web Shop 2, where insufficient input sanitization allows attackers to inject malicious scripts. The example URL demonstrates a potential attack vector but lacks executable exploit code.