CVE-2009-3066

This exploit demonstrates a cross-site scripting (XSS) vulnerability in Property Watch 2.0 by injecting a malicious script via the 'videoid' parameter in the email.php endpoint. The script executes arbitrary JavaScript to steal cookie-based authentication credentials.

This exploit demonstrates a cross-site scripting (XSS) vulnerability in Property Watch 2.0 by injecting a malicious script via the 'redirect' parameter in the login.php URL. The script executes arbitrary JavaScript in the context of the affected site, potentially stealing cookies or performing other malicious actions.