Exploitation Summary
EIP tracks 1 public exploit for CVE-2009-1735. PoCs published by snakespc.
AI-analyzed exploit summary This exploit demonstrates SQL injection and XSS vulnerabilities in VidShare Pro. The SQLi PoC extracts database version, user, and database name via UNION-based injection, while the XSS PoC shows a simple alert payload in the search form.
Description
Cross-site scripting (XSS) vulnerability in search.php in VidSharePro allows remote attackers to inject arbitrary web script or HTML via the searchtxt parameter. NOTE: some of these details are obtained from third party information.
Exploits (1)
This exploit demonstrates SQL injection and XSS vulnerabilities in VidShare Pro. The SQLi PoC extracts database version, user, and database name via UNION-based injection, while the XSS PoC shows a simple alert payload in the search form.