CVE-2012-1039

This exploit demonstrates a cross-site scripting (XSS) vulnerability in Dotclear by injecting malicious JavaScript into the 'login_data' parameter. The PoC submits a form with crafted input to trigger the XSS, potentially stealing cookies or performing other client-side attacks.

This exploit demonstrates a reflected XSS vulnerability in Dotclear by injecting a malicious script via the 'nb' parameter in the admin/blogs.php page. The PoC uses a simple alert to display the user's cookies, proving the vulnerability.

This exploit demonstrates multiple XSS vulnerabilities in Dotclear by injecting JavaScript via URL parameters. The PoC shows how unsanitized input in the admin interface can lead to arbitrary script execution.

This exploit demonstrates a reflected XSS vulnerability in Dotclear 2.4.1.2 by injecting arbitrary JavaScript code via the 'tag' parameter in the admin plugin interface. The payload executes an alert with the user's cookies, proving the vulnerability.