Exploitation Summary
EIP tracks 2 public exploits for CVE-2007-2732. PoCs published by Mikhail Markin.
AI-analyzed exploit summary The provided text describes multiple XSS vulnerabilities in Jetbox CMS 2.1 due to insufficient sanitization of user-supplied input in various parameters. It includes example URLs demonstrating the vulnerable endpoints but does not contain executable exploit code.
Description
Multiple cross-site scripting (XSS) vulnerabilities in Jetbox CMS allow remote attackers to inject arbitrary web script or HTML via the (1) path parameter to view/search/; or the (2) companyname, (3) country, (4) email, (5) firstname, (6) middlename, (7) required, (8) surname, or (9) title parameter to view/supplynews/.
Exploits (2)
The provided text describes multiple XSS vulnerabilities in Jetbox CMS 2.1 due to insufficient sanitization of user-supplied input in various parameters. It includes example URLs demonstrating the vulnerable endpoints but does not contain executable exploit code.
The provided text describes a cross-site scripting (XSS) vulnerability in Jetbox CMS 2.1, where user-supplied input in the 'path' parameter is not properly sanitized. The example URL demonstrates how an attacker could inject malicious scripts.