CVE-2009-2588

Hotscripts Type PHP Clone Script - XSS

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 3 public exploits for CVE-2009-2588. PoCs published by Moudi.

AI-analyzed exploit summary This exploit demonstrates a cross-site scripting (XSS) vulnerability in Hotscripts Type PHP Clone Script. The vulnerability arises from insufficient sanitization of user-supplied data, allowing arbitrary script execution in the context of the affected site.

Description

Multiple cross-site scripting (XSS) vulnerabilities in Hotscripts Type PHP Clone Script allow remote attackers to inject arbitrary web script or HTML via the msg parameter to (1) feedback.php, (2) index.php, and (3) lostpassword.php.

Exploits (3)

exploitdb WORKING POC VERIFIED
by Moudi · textwebappsphp
https://www.exploit-db.com/exploits/34776

This exploit demonstrates a cross-site scripting (XSS) vulnerability in Hotscripts Type PHP Clone Script. The vulnerability arises from insufficient sanitization of user-supplied data, allowing arbitrary script execution in the context of the affected site.

Classification
Working Poc 90%
Attack Type
Xss
Complexity
Trivial
Reliability
Reliable
Target: Hotscripts Type PHP Clone Script
No auth needed
Prerequisites: Access to the vulnerable endpoint
MITRE ATT&CK
devstral-2 · analyzed Feb 16, 2026 Full analysis →
exploitdb WRITEUP VERIFIED
by Moudi · textwebappsphp
https://www.exploit-db.com/exploits/34775

The provided text describes a cross-site scripting (XSS) vulnerability in Hotscripts Type PHP Clone Script, where user-supplied input is not properly sanitized. The example demonstrates an XSS payload injected via the 'msg' parameter in a URL.

Classification
Writeup 90%
Attack Type
Xss
Complexity
Trivial
Reliability
Reliable
Target: Hotscripts Type PHP Clone Script
No auth needed
Prerequisites: Access to the vulnerable web application
MITRE ATT&CK
devstral-2 · analyzed Feb 16, 2026 Full analysis →
exploitdb WORKING POC VERIFIED
by Moudi · textwebappsphp
https://www.exploit-db.com/exploits/34774

This exploit demonstrates a cross-site scripting (XSS) vulnerability in Hotscripts Type PHP Clone Script by injecting a malicious script via the 'msg' parameter in feedback.php. The PoC shows how arbitrary JavaScript can be executed in the context of the affected site.

Classification
Working Poc 90%
Attack Type
Xss
Complexity
Trivial
Reliability
Reliable
Target: Hotscripts Type PHP Clone Script
No auth needed
Prerequisites: Access to the vulnerable feedback.php endpoint
MITRE ATT&CK
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (7)

Core 7
Core References
Vendor Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2009/1979
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/51911
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/35892
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://osvdb.org/56167
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://osvdb.org/56168
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://osvdb.org/56169

Scores

EPSS 0.0221
EPSS Percentile 80.3%

Details

CWE
CWE-79
Status published
Products (1)
resalecode/hotscripts_type_php_clone_script
Published Jul 24, 2009
Tracked Since Feb 18, 2026