CVE-2009-4458

This exploit demonstrates a cross-site scripting (XSS) vulnerability in FreePBX by injecting malicious script code via the 'tech' parameter in the URL. The script steals the user's cookie and sends it to an attacker-controlled server.

This exploit demonstrates multiple XSS vulnerabilities in FreePBX, including client-side and server-side attacks. It provides proof-of-concept code for injecting malicious scripts to steal session data (cookies) via crafted URLs and form inputs.

This exploit demonstrates a cross-site scripting (XSS) vulnerability in FreePBX 2.5.2 by injecting malicious script code into the 'description' field of a form. It also includes a PHP script to capture cookies via a crafted GET request.