CVE-2009-0573

This exploit demonstrates a cross-site scripting (XSS) vulnerability in FotoWeb 6.0 by injecting a script tag into the search parameter of the Grid.fwx endpoint. The vulnerability arises due to insufficient input sanitization, allowing arbitrary JavaScript execution in the context of the affected site.

This exploit demonstrates a cross-site scripting (XSS) vulnerability in FotoWeb 6.0 by injecting a script tag into the 's' parameter of the Login.fwx endpoint. The PoC triggers an alert box, proving arbitrary JavaScript execution in the context of the affected site.