CVE-2009-0541

This exploit demonstrates a reflected XSS vulnerability in Magento 1.2.0 by injecting a script tag into the 'return' parameter of the downloader endpoint. The lack of input sanitization allows arbitrary JavaScript execution in the context of the affected site.

This exploit demonstrates a cross-site scripting (XSS) vulnerability in Magento 1.2.0 by injecting malicious JavaScript code into the 'Email address' field of the forgot password page. The lack of input sanitization allows arbitrary script execution in the context of the affected site.

This exploit demonstrates a cross-site scripting (XSS) vulnerability in Magento's admin login page by injecting a script tag into the username field. The vulnerability arises due to insufficient input sanitization, allowing arbitrary JavaScript execution in the context of the affected site.