CVE-2009-3186
VideoGirls BiZ - Cross-Site Scripting via Forum, Profile, and View Parameters
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2009-3186. PoCs published by Moudi.
AI-analyzed exploit summary This exploit demonstrates a reflected XSS vulnerability in VideoGirls by injecting a script tag into the 'p' parameter of view.php, which executes arbitrary JavaScript in the context of the affected site.
Description
Multiple cross-site scripting (XSS) vulnerabilities in VideoGirls BiZ allow remote attackers to inject arbitrary web script or HTML via the (1) t parameter to forum.php, (2) profile_name parameter to profile.php, and (3) p parameter to view.php.
Exploits (3)
This exploit demonstrates a reflected XSS vulnerability in VideoGirls by injecting a script tag into the 'p' parameter of view.php, which executes arbitrary JavaScript in the context of the affected site.
This exploit demonstrates a reflected XSS vulnerability in VideoGirls by injecting a JavaScript payload via the 'profile_name' parameter. The payload executes arbitrary JavaScript in the context of the affected site, potentially leading to cookie theft or other client-side attacks.
This exploit demonstrates a reflected XSS vulnerability in VideoGirls forum.php by injecting a script tag via the 't' parameter, which executes arbitrary JavaScript in the context of the affected site.