CVE-2008-0980

This exploit demonstrates a cross-site scripting (XSS) vulnerability in Spyce 2.1.3 by injecting a malicious script into the 'name' parameter of a request. The PoC shows how an attacker can execute arbitrary JavaScript in the context of the affected site.

This exploit demonstrates a reflected XSS vulnerability in Spyce 2.1.3 by injecting a malicious script via the 'x' parameter in the 'handlervalidate.spy' endpoint. The PoC triggers an alert dialog, proving arbitrary JavaScript execution in the context of the affected site.

This is a writeup describing a cross-site scripting (XSS) vulnerability in Spyce 2.1.3. The vulnerability allows arbitrary script execution in the context of the affected site, potentially leading to credential theft or other client-side attacks.

This exploit demonstrates a reflected XSS vulnerability in Spyce 2.1.3 by injecting arbitrary JavaScript code via the 'Name' parameter in a GET request. The payload triggers a client-side script execution, potentially leading to session hijacking or information disclosure.

This exploit demonstrates a cross-site scripting (XSS) vulnerability in Spyce 2.1.3 by injecting malicious scripts via URL parameters. The PoC shows how an attacker can execute arbitrary JavaScript in the context of the affected site, potentially stealing cookies or disclosing server paths.