CVE-2013-1436
xmonad-contrib < 0.11.2 - Remote Code Execution via Web Page Title
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2013-1436. PoCs published by Joachim Breitner.
AI-analyzed exploit summary This exploit leverages a command injection vulnerability in the XMonad.Hooks.DynamicLog module by embedding malicious commands within HTML tags. The PoC demonstrates arbitrary command execution via crafted HTML titles.
Description
The XMonad.Hooks.DynamicLog module in xmonad-contrib before 0.11.2 allows remote attackers to execute arbitrary commands via a web page title, which activates the commands when the user clicks on the xmobar window title, as demonstrated using an action tag.
Exploits (1)
This exploit leverages a command injection vulnerability in the XMonad.Hooks.DynamicLog module by embedding malicious commands within HTML tags. The PoC demonstrates arbitrary command execution via crafted HTML titles.