CVE-2009-3789

The exploit demonstrates XSS vulnerabilities in OpenDocMan by injecting JavaScript via unsanitized user input in the URL. It also references an SQL injection vulnerability, though no direct SQLi payload is provided.

The provided text describes an SQL injection and XSS vulnerability in OpenDocMan 1.2.5, including a sample XSS payload. It lacks executable exploit code but details the vulnerability and potential impact.

The document describes an authentication bypass and multiple XSS vulnerabilities in OpenDocMan v1.2.5. It includes proof-of-concept examples for SQL injection-based authentication bypass and various XSS payloads.

The exploit demonstrates an XSS vulnerability in OpenDocMan by injecting a script tag into the URL. It also includes a base64-encoded payload suggesting potential SQL injection, though the primary focus is on XSS.

The provided text describes an SQL injection and XSS vulnerability in OpenDocMan 1.2.5, with an example XSS payload. No functional exploit code is included.

The provided text describes an SQL injection and XSS vulnerability in OpenDocMan 1.2.5, with an example XSS payload. It lacks executable exploit code but outlines the vulnerability and potential impact.

The provided text describes an SQL injection and XSS vulnerability in OpenDocMan 1.2.5, with an example XSS payload. It lacks executable exploit code but outlines the vulnerability and potential impact.

The provided text describes an SQL injection and XSS vulnerability in OpenDocMan 1.2.5, with example URLs demonstrating the XSS exploit. No actual exploit code is present.

The provided text describes an SQL injection and XSS vulnerability in OpenDocMan 1.2.5, with an example XSS payload. It lacks executable exploit code but provides technical details and an attack vector.

The provided text describes an SQL injection and XSS vulnerability in OpenDocMan 1.2.5, with an example XSS payload. No functional exploit code is included.

This exploit demonstrates an XSS vulnerability in OpenDocMan 1.2.5 by injecting a script tag into the URL, which executes arbitrary JavaScript in the context of the user's session. The vulnerability arises from insufficient sanitization of user-supplied input in the category.php file.

The provided text describes an SQL injection and XSS vulnerability in OpenDocMan 1.2.5, with an example XSS payload. It lacks executable exploit code but provides technical details and a proof-of-concept URL for XSS.