CVE-2009-4547
ViArt CMS 3.x - Cross-Site Scripting via category_id or forum_id Parameter
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2009-4547. PoCs published by Moudi.
AI-analyzed exploit summary This exploit demonstrates a reflected XSS vulnerability in ViArt CMS by injecting malicious JavaScript code via the 'forum_id' parameter in the URL. The payload bypasses basic sanitization using obfuscation techniques like mixed case and URL encoding.
Description
Multiple cross-site scripting (XSS) vulnerabilities in ViArt CMS 3.x allow remote attackers to inject arbitrary web script or HTML via the (1) category_id parameter to forums.php, or the forum_id parameter to (2) forum.php or (3) forum_topic_new.php.
Exploits (3)
This exploit demonstrates a reflected XSS vulnerability in ViArt CMS by injecting malicious JavaScript code via the 'forum_id' parameter in the URL. The payload bypasses basic sanitization using obfuscation techniques like mixed case and URL encoding.
This exploit demonstrates a reflected XSS vulnerability in ViArt CMS by injecting malicious JavaScript via the 'category_id' parameter in the forums.php page. The payload uses URL encoding and case obfuscation to bypass basic filters.
This exploit demonstrates a reflected XSS vulnerability in ViArt CMS by injecting malicious JavaScript via the 'forum_id' parameter. The payload bypasses basic sanitization using URL encoding and case variation.