Exploitation Summary
EIP tracks 4 public exploits for CVE-2008-5569. PoCs published by th3.r00k.ieatpork.
AI-analyzed exploit summary The provided text describes a cross-site scripting (XSS) vulnerability in PhPepperShop 1.4, where user-supplied input is not properly sanitized. The example URL demonstrates a basic XSS payload that triggers an alert dialog.
Description
Multiple cross-site scripting (XSS) vulnerabilities in PHPepperShop 1.4 allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO to (1) index.php or (2) shop/kontakt.php, or (3) shop_kunden_mgmt.php or (4) SHOP_KONFIGURATION.php in shop/Admin/.
Exploits (4)
The provided text describes a cross-site scripting (XSS) vulnerability in PhPepperShop 1.4, where user-supplied input is not properly sanitized. The example URL demonstrates a basic XSS payload that triggers an alert dialog.
The provided text describes a cross-site scripting (XSS) vulnerability in PhPepperShop 1.4, where user-supplied data is not sufficiently sanitized. The example URL demonstrates a reflected XSS payload using a script tag.
The provided text describes a cross-site scripting (XSS) vulnerability in PhPepperShop 1.4, where user-supplied input is not properly sanitized. The example demonstrates a basic XSS payload injected into a URL parameter.
The provided text describes a cross-site scripting (XSS) vulnerability in PhPepperShop 1.4, where user-supplied input is not sufficiently sanitized. The example URL demonstrates a reflected XSS payload.