Exploitation Summary
EIP tracks 1 public exploit for CVE-2009-4683. PoCs published by Moudi.
AI-analyzed exploit summary This exploit demonstrates XSS and LFI vulnerabilities in the Good/Bad Vote PHP script. The XSS payload is injected via the 'id' parameter, while the LFI is achieved by manipulating file inclusion paths.
Description
Directory traversal vulnerability in vote.php in Good/Bad Vote allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the id parameter in a dovote action. NOTE: some of these details are obtained from third party information.
Exploits (1)
This exploit demonstrates XSS and LFI vulnerabilities in the Good/Bad Vote PHP script. The XSS payload is injected via the 'id' parameter, while the LFI is achieved by manipulating file inclusion paths.