CVE-2009-4937
Small Pirate 2.1 - Stored Cross-Site Scripting via img BBCode Tag onmouseover Action
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2009-4937. PoCs published by YEnH4ckEr.
AI-analyzed exploit summary This exploit demonstrates multiple SQL injection vulnerabilities in Small Pirates CMS v2.1, including union-based SQLi and blind SQLi, as well as a cookie stealing vulnerability via XSS. The PoC provides specific URLs and payloads to exploit these vulnerabilities.
Description
Cross-site scripting (XSS) vulnerability in Small Pirate (SPirate) 2.1 allows remote attackers to inject arbitrary web script or HTML via an onmouseover action in an img BBCode tag within a url BBCode tag.
Exploits (1)
This exploit demonstrates multiple SQL injection vulnerabilities in Small Pirates CMS v2.1, including union-based SQLi and blind SQLi, as well as a cookie stealing vulnerability via XSS. The PoC provides specific URLs and payloads to exploit these vulnerabilities.