Exploitation Summary
EIP tracks 1 public exploit for CVE-2009-3256. PoCs published by Inj3ct0r.
AI-analyzed exploit summary This exploit demonstrates an XSS vulnerability in LiveStreet 0.2 by injecting arbitrary JavaScript via the 'asd' parameter in the blogInfo.php endpoint. The PoC uses a simple script tag to trigger an alert, confirming the vulnerability.
Description
Cross-site scripting (XSS) vulnerability in include/ajax/blogInfo.php in LiveStreet 0.2 allows remote attackers to inject arbitrary web script or HTML via the URI, as demonstrated by a SCRIPT element in an arbitrary parameter such as the asd parameter.
Exploits (1)
This exploit demonstrates an XSS vulnerability in LiveStreet 0.2 by injecting arbitrary JavaScript via the 'asd' parameter in the blogInfo.php endpoint. The PoC uses a simple script tag to trigger an alert, confirming the vulnerability.