CVE-2009-3359

This exploit demonstrates a cross-site scripting (XSS) vulnerability in Datetopia Match Agency BiZ by injecting a script tag into the 'important' parameter of the edit_profile.php page. The PoC uses a simple alert to display the user's cookies, proving the vulnerability.

This exploit demonstrates a cross-site scripting (XSS) vulnerability in Datetopia Match Agency BiZ by injecting a malicious script via the 'pid' parameter in report.php. The script executes arbitrary JavaScript in the context of the affected site, potentially stealing cookies or performing other malicious actions.