CVE-2007-3653

This exploit demonstrates a cross-site scripting (XSS) vulnerability in FaName 1.0 by injecting malicious script tags into the 'key' and 'desc' parameters of the index.php file. The PoC shows how an attacker can execute arbitrary JavaScript in the context of the affected site.

The provided text describes a cross-site scripting (XSS) vulnerability in FaName 1.0, where user-supplied input is not properly sanitized. The example demonstrates how an attacker could inject arbitrary script code into the 'name' parameter of the 'page.php' script.