CVE-2012-1110

The exploit demonstrates XSS vulnerabilities in Etano by injecting arbitrary JavaScript via unsanitized input parameters in photo_search.php. The PoC uses simple script tags to trigger an alert, confirming the vulnerability.

This exploit demonstrates multiple reflected XSS vulnerabilities in Etano versions 1.20 to 1.22. The PoC includes URLs with injected JavaScript payloads that trigger alerts, confirming the lack of proper input sanitization.

This exploit demonstrates a reflected XSS vulnerability in Etano versions 1.20 to 1.22. The PoC injects arbitrary JavaScript via the 'return' parameter in the photo_view.php URL, which executes in the context of the affected site.