Exploitation Summary
EIP tracks 2 public exploits for CVE-2009-4690. PoCs published by Moudi.
AI-analyzed exploit summary This exploit demonstrates a cross-site scripting (XSS) vulnerability in Programs Rating Script by injecting arbitrary JavaScript code via the 'id' parameter in the 'rate.php' file. The payload bypasses basic sanitization using obfuscation techniques like mixed case and URL encoding.
Description
Multiple cross-site scripting (XSS) vulnerabilities in YourFreeWorld Programs Rating Script allow remote attackers to inject arbitrary web script or HTML via the id parameter to (1) rate.php and (2) postcomments.php.
Exploits (2)
This exploit demonstrates a cross-site scripting (XSS) vulnerability in Programs Rating Script by injecting arbitrary JavaScript code via the 'id' parameter in the 'rate.php' file. The payload bypasses basic sanitization using obfuscation techniques like mixed case and URL encoding.
This exploit demonstrates a cross-site scripting (XSS) vulnerability in Programs Rating Script by injecting arbitrary JavaScript via the 'id' parameter in postcomments.php. The payload uses basic obfuscation to bypass input filters.