CVE-2009-4366

The exploit demonstrates multiple XSS and XSRF vulnerabilities in Ez Blog 1.0. It includes functional PoC code for front-end XSS and admin panel actions like adding blogs, approving comments, changing admin info, and deleting blogs.

This exploit demonstrates multiple CSRF vulnerabilities in Ez Cart 1.0, allowing actions such as deleting items, members, or categories, changing admin credentials, and sending emails to all members. The PoC includes HTML forms and direct URLs to trigger these actions without proper authentication checks.