Exploitation Summary
EIP tracks 3 public exploits for CVE-2009-2588. PoCs published by Moudi.
AI-analyzed exploit summary This exploit demonstrates a cross-site scripting (XSS) vulnerability in Hotscripts Type PHP Clone Script. The vulnerability arises from insufficient sanitization of user-supplied data, allowing arbitrary script execution in the context of the affected site.
Description
Multiple cross-site scripting (XSS) vulnerabilities in Hotscripts Type PHP Clone Script allow remote attackers to inject arbitrary web script or HTML via the msg parameter to (1) feedback.php, (2) index.php, and (3) lostpassword.php.
Exploits (3)
This exploit demonstrates a cross-site scripting (XSS) vulnerability in Hotscripts Type PHP Clone Script. The vulnerability arises from insufficient sanitization of user-supplied data, allowing arbitrary script execution in the context of the affected site.
The provided text describes a cross-site scripting (XSS) vulnerability in Hotscripts Type PHP Clone Script, where user-supplied input is not properly sanitized. The example demonstrates an XSS payload injected via the 'msg' parameter in a URL.
This exploit demonstrates a cross-site scripting (XSS) vulnerability in Hotscripts Type PHP Clone Script by injecting a malicious script via the 'msg' parameter in feedback.php. The PoC shows how arbitrary JavaScript can be executed in the context of the affected site.