Exploitation Summary
EIP tracks 1 public exploit for CVE-2008-3100. PoCs published by Fabian Fingerle.
AI-analyzed exploit summary This exploit demonstrates a cross-site scripting (XSS) vulnerability in Owl Intranet Engine 0.95 by injecting a script tag into the username parameter of the register.php endpoint. The PoC triggers an alert dialog, proving arbitrary script execution in the context of the affected site.
Description
Cross-site scripting (XSS) vulnerability in lib/owl.lib.php in Steve Bourgeois and Chris Vincent Owl Intranet Knowledgebase 0.95 and earlier allows remote attackers to inject arbitrary web script or HTML via the username parameter in a getpasswd action to register.php.
Exploits (1)
This exploit demonstrates a cross-site scripting (XSS) vulnerability in Owl Intranet Engine 0.95 by injecting a script tag into the username parameter of the register.php endpoint. The PoC triggers an alert dialog, proving arbitrary script execution in the context of the affected site.