CVE-2011-4335
Contao < 2.10.2 - Cross-Site Scripting via PATH_INFO to index.php
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2011-4335. PoCs published by Stefan Schurtz.
AI-analyzed exploit summary This exploit demonstrates a cross-site scripting (XSS) vulnerability in Contao 2.10.1 by injecting malicious script tags into the URL. The PoC shows how arbitrary JavaScript can be executed in the context of the affected site.
Description
Multiple cross-site scripting (XSS) vulnerabilities in Contao before 2.10.2 allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO to index.php in a (1) teachers.html or (2) teachers/ action.
Exploits (1)
This exploit demonstrates a cross-site scripting (XSS) vulnerability in Contao 2.10.1 by injecting malicious script tags into the URL. The PoC shows how arbitrary JavaScript can be executed in the context of the affected site.