Exploitation Summary
EIP tracks 2 public exploits for CVE-2009-4175. PoCs published by Andrew Horton.
AI-analyzed exploit summary The provided text describes multiple vulnerabilities in CuteNews and UTF-8 CuteNews, including XSS, HTML injection, and security bypass issues. It outlines potential impacts and provides a sample URL for an information disclosure or XSS attack but lacks actual exploit code.
Description
CutePHP CuteNews 1.4.6 and UTF-8 CuteNews before 8b allows remote attackers to obtain sensitive information via an invalid date value in the from_date_day parameter to search.php, which reveals the installation path in an error message.
Exploits (2)
The provided text describes multiple vulnerabilities in CuteNews and UTF-8 CuteNews, including XSS, HTML injection, and security bypass issues. It outlines potential impacts and provides a sample URL for an information disclosure or XSS attack but lacks actual exploit code.
This advisory details multiple vulnerabilities in Cute News and UTF-8 Cute News, including XSS, CSRF, LFI, and command execution. It provides technical descriptions and proof-of-concept exploits for each vulnerability.