CVE-2007-6646
LiveCart < 1.1.0 - Cross-Site Scripting via Multiple Parameters
Title source: llmExploitation Summary
EIP tracks 4 public exploits for CVE-2007-6646. PoCs published by Doz.
AI-analyzed exploit summary The provided text describes a cross-site scripting (XSS) vulnerability in LiveCart 1.0.1, where user-supplied input is not properly sanitized. The example URL demonstrates how an attacker could inject arbitrary script code via the 'return' parameter.
Description
Multiple cross-site scripting (XSS) vulnerabilities in LiveCart 1.0.1, and possibly other versions before 1.1.0, allow remote attackers to inject arbitrary web script or HTML via (1) the return parameter to user/remindPassword, (2) the q parameter to the category script, (3) the return parameter to the order script, or (4) the email parameter to user/remindComplete.
Exploits (4)
The provided text describes a cross-site scripting (XSS) vulnerability in LiveCart 1.0.1, where user-supplied input is not properly sanitized. The example URL demonstrates how an attacker could inject arbitrary script code via the 'return' parameter.
The provided text describes a cross-site scripting (XSS) vulnerability in LiveCart 1.0.1, where user-supplied input is not properly sanitized. The example URL demonstrates how an attacker could inject arbitrary script code via the 'return' parameter.
The provided text describes a cross-site scripting (XSS) vulnerability in LiveCart 1.0.1 due to improper input sanitization. It includes an example URL demonstrating the vulnerability but lacks executable exploit code.
The provided text describes a cross-site scripting (XSS) vulnerability in LiveCart 1.0.1, where user-supplied input is not properly sanitized. The example URL demonstrates how an attacker could inject arbitrary script code via the 'email' parameter.