CVE-2008-2186

This is a vulnerability writeup detailing multiple issues in ChiCoMaS CMS, including database information disclosure, unauthorized access to backups, and reflected XSS. No exploit code is provided, only PoC URLs.

This exploit demonstrates a cross-site scripting (XSS) vulnerability in ChiCoMaS 2.0.4 by injecting malicious JavaScript via the 'q' parameter in the URL. The PoC shows how an attacker can execute arbitrary script code in the context of the affected site.