Exploitation Summary
EIP tracks 5 public exploits for CVE-2007-3060. PoCs published by ReZEN.
AI-analyzed exploit summary The provided text describes a cross-site scripting (XSS) vulnerability in PHP Live! 3.2.2, where user-supplied input is not properly sanitized, allowing arbitrary script execution in the context of the affected site.
Description
Multiple cross-site scripting (XSS) vulnerabilities in PHP Live! 3.2.2 allow remote attackers to inject arbitrary web script or HTML via the (1) sid parameter to (a) chat.php, (2) LANG[DEFAULT_BRANDING] and (3) PHPLIVE_VERSION parameters to (b) help.php, the (4) admin[name] parameter to (c) admin/header.php, and the (5) BASE_URL parameter to (d) super/info.php, and in some cases, the LANG[DEFAULT_BRANDING], PHPLIVE_VERSION, and (6) nav_line parameters to setup/footer.php, different vectors than CVE-2006-6769.
Exploits (5)
The provided text describes a cross-site scripting (XSS) vulnerability in PHP Live! 3.2.2, where user-supplied input is not properly sanitized, allowing arbitrary script execution in the context of the affected site.
The provided text describes a cross-site scripting (XSS) vulnerability in PHP Live! 3.2.2, where user-supplied input is not properly sanitized. It includes a proof-of-concept URL demonstrating the vulnerability.
This is a writeup describing a cross-site scripting (XSS) vulnerability in PHP Live! 3.2.2. The vulnerability allows arbitrary script execution in the context of the affected site due to improper input sanitization.
This exploit demonstrates multiple XSS vulnerabilities in PHP Live! 3.2.2 by injecting arbitrary JavaScript via unsanitized input parameters in the footer.php file. The PoC includes example URLs with script tags to trigger alerts.
The provided text describes a cross-site scripting (XSS) vulnerability in PHP Live! 3.2.2, where user-supplied input is not properly sanitized. It includes a proof-of-concept URL demonstrating the vulnerability.