CVE-2007-6608

This exploit demonstrates an XSS vulnerability in OpenBiblio's theme_preview.php by injecting a malicious script into the 'themeName' parameter. The script executes arbitrary JavaScript, potentially stealing cookie-based authentication credentials.

The provided text describes multiple input-validation vulnerabilities in OpenBiblio, including SQL injection, XSS, HTML injection, and local file inclusion. It includes an example URL demonstrating XSS but lacks executable exploit code.

The provided text describes multiple input-validation vulnerabilities in OpenBiblio, including SQL injection, XSS, HTML injection, and local file inclusion. It references a specific XSS example but does not include functional exploit code.