CVE-2007-3055

Codelib Linker < 2.0.4 - Cross-Site Scripting via Cat Parameter

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2007-3055. PoCs published by vagrant.

AI-analyzed exploit summary The provided text describes a cross-site scripting (XSS) vulnerability in Codelib Linker, where user-supplied input is not properly sanitized. An attacker can exploit this by injecting arbitrary script code via the 'cat' parameter in the URL.

Description

Cross-site scripting (XSS) vulnerability in index.php in Codelib Linker 2.0.4 and earlier allows remote attackers to inject arbitrary web script or HTML via the cat parameter.

Exploits (1)

exploitdb WRITEUP VERIFIED

by vagrant · textwebappsphp

https://www.exploit-db.com/exploits/30138

View Code ZIP pw:eip

The provided text describes a cross-site scripting (XSS) vulnerability in Codelib Linker, where user-supplied input is not properly sanitized. An attacker can exploit this by injecting arbitrary script code via the 'cat' parameter in the URL.

Classification

Writeup 90%

Attack Type

Xss

Complexity

Trivial

Reliability

Theoretical

Target: Codelib Linker

No auth needed

Prerequisites: A vulnerable version of Codelib Linker · User interaction to visit a crafted URL

MITRE ATT&CK