Exploitation Summary
EIP tracks 1 public exploit for CVE-2010-4331. PoCs published by Mark Stanislav.
AI-analyzed exploit summary This is a writeup describing a persistent XSS vulnerability in Seo Panel 2.2.0, where unfiltered cookie values ('default_news' or 'sponsors') are rendered in the application. The 'default_news' cookie does not require authentication, while 'sponsors' does.
Description
Multiple cross-site scripting (XSS) vulnerabilities in Seo Panel 2.2.0 allow remote attackers to inject arbitrary web script or HTML via the (1) default_news or (2) sponsors cookies, which are not properly handled by (a) controllers/index.ctrl.php or (b) controllers/settings.ctrl.php.
Exploits (1)
This is a writeup describing a persistent XSS vulnerability in Seo Panel 2.2.0, where unfiltered cookie values ('default_news' or 'sponsors') are rendered in the application. The 'default_news' cookie does not require authentication, while 'sponsors' does.