CVE-2008-0877

The exploit demonstrates multiple XSS vulnerabilities in Jinzora 2.7.5 by injecting malicious scripts via unsanitized input parameters in popup.php. The PoC includes three distinct attack vectors targeting different parameters.

This exploit demonstrates a cross-site scripting (XSS) vulnerability in Jinzora 2.7.5 by injecting arbitrary JavaScript code via the 'language' parameter in ajax_request.php. The PoC uses a simple IMG tag with a JavaScript URI to trigger an alert, proving the lack of input sanitization.

This exploit demonstrates multiple XSS vulnerabilities in Jinzora 2.7.5 by injecting malicious scripts via unsanitized user input in the 'frontend' parameter and path manipulation.

This exploit demonstrates a cross-site scripting (XSS) vulnerability in Jinzora 2.7.5 by injecting a malicious script via the 'jz_path' parameter in the URL. The PoC uses a simple JavaScript alert to confirm the vulnerability.