CVE-2008-1296

This exploit demonstrates a reflected XSS vulnerability in EncapsGallery 1.11.2 by injecting a script tag into the 'file' parameter of catalog_watermark.php, which executes arbitrary JavaScript in the context of the affected site.

This exploit demonstrates a cross-site scripting (XSS) vulnerability in EncapsGallery 1.11.2 by injecting arbitrary JavaScript code via the 'file' parameter in watermark.php. The PoC uses a simple alert() payload to confirm the vulnerability.