CVE-2009-4822

The exploit demonstrates multiple XSS vulnerabilities in Kasseler CMS by injecting JavaScript code via unsanitized URL parameters. It targets specific modules and parameters to trigger the vulnerabilities.

This exploit describes an information disclosure vulnerability in Kasseler CMS 2.0.5 where backup files containing sensitive user data (including admin credentials) are exposed. Additionally, an XSS vulnerability is mentioned but not detailed.