CVE-2008-3186
Chipmunk Blogger - Cross-Site Scripting via Membername Parameter
Title source: llmExploitation Summary
EIP tracks 5 public exploits for CVE-2008-3186. PoCs published by sl4xUz.
AI-analyzed exploit summary The provided text describes a cross-site scripting (XSS) vulnerability in Chipmunk Blog, where user-supplied input via the 'membername' parameter in photos.php is not properly sanitized. It includes example URLs demonstrating the vulnerability but does not contain executable exploit code.
Description
Multiple cross-site scripting (XSS) vulnerabilities in Chipmunk Blog (Blogger) allow remote attackers to inject arbitrary web script or HTML via the membername parameter to (1) members.php, (2) comments.php, (3) photos.php, (4) archive.php, or (5) cat.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Exploits (5)
The provided text describes a cross-site scripting (XSS) vulnerability in Chipmunk Blog, where user-supplied input via the 'membername' parameter in photos.php is not properly sanitized. It includes example URLs demonstrating the vulnerability but does not contain executable exploit code.
The provided text describes a cross-site scripting (XSS) vulnerability in Chipmunk Blog, where user-supplied input via the 'membername' parameter is not properly sanitized. It includes example URLs demonstrating the vulnerability but does not contain executable exploit code.
The provided text describes a cross-site scripting (XSS) vulnerability in Chipmunk Blog, where user-supplied input via the 'membername' parameter in comments.php is not properly sanitized. It includes example URLs demonstrating the vulnerability but does not contain executable exploit code.
The provided code is a writeup describing a cross-site scripting (XSS) vulnerability in Chipmunk Blog. It includes example URLs demonstrating how an attacker could inject arbitrary script code due to insufficient sanitization of user-supplied data.
The provided text describes a cross-site scripting (XSS) vulnerability in Chipmunk Blog, where user-supplied input via the 'membername' parameter in archive.php is not properly sanitized. It includes example URLs demonstrating the vulnerability but does not contain executable exploit code.