QLWD/code_shield huggingface dataset:
标题: Box UK Amaxus CMS 3.0 - Cross-Site Scripting EDB-ID: 26877 CVE: 2005-4375 类型: WEBAPPS 平台: PHP 发布日期: 2005-12-19 漏洞利用脚本: source: https://www.securityfocus.com/bid/15936/info

Box UK Amaxus CMS is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks.

Amaxus CMS verions 3 and earlier are reportedly prone to this issue. 

http://example.com/?search_word=&search.x=20&search.y=4&change=[XSS] URL: https://www.exploit-db.com/exploits/26877
标题: Caravel CMS 3.0 Beta 1 - Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 26878 CVE: 2005-4381 类型: WEBAPPS 平台: PHP 发布日期: 2005-12-19 漏洞利用脚本: source: https://www.securityfocus.com/bid/15939/info

Caravel CMS is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks. 

http://www.example.com/Introduction?&CB=CB1&fileDN=[XSS]

http://www.example.com/Community/News?&CB=CB1&fileDN=[XSS]

http://www.example.com/Community/News?&CB=CB1&fileDN=mnF%3
Djune2005.html%2CmnOD%3DNewsletter%2
CmnOD%3DMy%20Documents%2Cdc%3Demanuel
%2Cdc%3Dmennonite%2Cdc%3Dnet&folderv
iewer_attrs=[XSS]

http://www.example.com/Introduction?&CB=CB1&fileDN=mnF%3D2.
3.html%2CmnOD%3DNews%2CmnOD%3DMy%20D
ocuments%2Cdc%3Demanuel%2Cdc%3Dmenno
nite%2Cdc%3Dnet&folderviewer_attrs=[XSS] URL: https://www.exploit-db.com/exploits/26878
标题: allinta CMS 2.3.2 - 'search.asp?searchQuery' Cross-Site Scripting EDB-ID: 26876 CVE: 2005-4374 类型: WEBAPPS 平台: ASP 发布日期: 2005-12-19 漏洞利用脚本: source: https://www.securityfocus.com/bid/15935/info
 
Allinta CMS is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.
 
An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks.
 
Allinta versions 2.3.2 and earlier are reportedly affected by this vulnerability. 

http://example.com/search.asp?searchQuery=[XSS]&go=Search&submitted=true URL: https://www.exploit-db.com/exploits/26876
标题: Acidcat CMS 2.1.13 - 'acidcat.mdb' Remote Information Disclosure EDB-ID: 26874 CVE: 2005-4371 类型: WEBAPPS 平台: ASP 发布日期: 2005-12-19 漏洞利用脚本: source: https://www.securityfocus.com/bid/15933/info
 
Acidcat CMS is prone to multiple input validation vulnerabilities. These issues are due to a lack of proper sanitization of user-supplied input.
 
Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation.
 
Acidcat CMS version 2.1.13 and prior are vulnerable; other versions may also be affected. 

http://www.example.com/acidcat/databases/acidcat.mdb URL: https://www.exploit-db.com/exploits/26874
标题: PHP-Fusion 6.0 - 'members.php' Cross-Site Scripting EDB-ID: 26872 CVE: 2005-4516 类型: WEBAPPS 平台: PHP 发布日期: 2005-12-19 漏洞利用脚本: source: https://www.securityfocus.com/bid/15931/info

PHP-Fusion is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks.

http://www.example.com/[fushion]/members.php?sortby=%3Ciframe%20src=http://www.example.com%20%3C URL: https://www.exploit-db.com/exploits/26872
标题: FLIP 0.9.0.1029 - 'forum.php?frame' Cross-Site Scripting EDB-ID: 26881 CVE: 2005-4365 类型: WEBAPPS 平台: PHP 发布日期: 2005-12-19 漏洞利用脚本: source: https://www.securityfocus.com/bid/15947/info
 
FLIP is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.
 
An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks.

http://www.example.com/forum.php?frame=[XSS] URL: https://www.exploit-db.com/exploits/26881
标题: Acidcat CMS 2.1.13 - 'ID' SQL Injection EDB-ID: 26873 CVE: 2005-4370 类型: WEBAPPS 平台: ASP 发布日期: 2005-12-19 漏洞利用脚本: source: https://www.securityfocus.com/bid/15933/info

Acidcat CMS is prone to multiple input validation vulnerabilities. These issues are due to a lack of proper sanitization of user-supplied input.

Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation.

Acidcat CMS version 2.1.13 and prior are vulnerable; other versions may also be affected. 

http://www.example.com/acidcat/default.asp?ID=1'

http://www.example.com/acidcat/default.asp?ID=26 union select 1,username,3,password,5,6 from Configuration URL: https://www.exploit-db.com/exploits/26873
标题: PlaySms 0.8 - 'index.php' Cross-Site Scripting EDB-ID: 26871 CVE: 2005-4432 类型: WEBAPPS 平台: PHP 发布日期: 2005-12-19 漏洞利用脚本: source: https://www.securityfocus.com/bid/15928/info

PlaySmS is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks

http://www.example.com/playsms/index.php?err=XSShere URL: https://www.exploit-db.com/exploits/26871
标题: PHP Arena PAFileDB Extreme Edition - SQL Injection EDB-ID: 26857 CVE: 2005-4329 类型: WEBAPPS 平台: PHP 发布日期: 2005-12-16 漏洞利用脚本: source: https://www.securityfocus.com/bid/15912/info

PAFileDB Extreme Edition is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query.

Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation. 

http://www.example.com/pafiledb.php?news=showcontent&newsid=[SQL] URL: https://www.exploit-db.com/exploits/26857
标题: Binary Board System 0.2.5 - 'toc.pl?board' Cross-Site Scripting EDB-ID: 26860 CVE: 2005-4333 类型: WEBAPPS 平台: CGI 发布日期: 2005-12-16 漏洞利用脚本: source: https://www.securityfocus.com/bid/15913/info
  
binary board system is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.
  
An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks.
  
This issue affects version 0.2.5; earlier versions may also be vulnerable. 

http://www.example.com/toc.pl?board=[XSS]&[member]=yes URL: https://www.exploit-db.com/exploits/26860
标题: WebGlimpse 2.x - Cross-Site Scripting EDB-ID: 26864 CVE: 2005-4328 类型: WEBAPPS 平台: CGI 发布日期: 2005-12-16 漏洞利用脚本: source: https://www.securityfocus.com/bid/15916/info

WebGlimpse is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks.

This issue affects version 2.14.1; other versions may also be vulnerable. 

http://www.example.com/webglimpse.cgi?query=&ID=1[XSS] URL: https://www.exploit-db.com/exploits/26864
标题: Binary Board System 0.2.5 - 'stats.pl' Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 26859 CVE: 2005-4333 类型: WEBAPPS 平台: CGI 发布日期: 2005-12-16 漏洞利用脚本: source: https://www.securityfocus.com/bid/15913/info
 
binary board system is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.
 
An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks.
 
This issue affects version 0.2.5; earlier versions may also be vulnerable. 

http://www.example.com/stats.pl?action=branchdetail&branch=[XSS]&view=posts&[member]=yes
http://www.example.com/stats.pl?action=boarddetail&board=[XSS]&view=posts&[member]=yes
http://www.example.com/stats.pl?action=userdetail&user=[XSS]&view=posts&[member]=yes URL: https://www.exploit-db.com/exploits/26859
标题: IHTML Merchant 2.0 - SQL Injection EDB-ID: 26856 CVE: 2005-4331 类型: WEBAPPS 平台: PHP 发布日期: 2005-12-16 漏洞利用脚本: source: https://www.securityfocus.com/bid/15911/info

iHTML Merchant is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query.

Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation. 

http://www.example.com/merchant.ihtml?id=56&step=[SQL]
http://www.example.com/merchant.ihtml?id=[SQL]
http://www.example.com/merchant.ihtml?pid=[SQL] URL: https://www.exploit-db.com/exploits/26856
标题: ScareCrow 2.13 - 'forum.cgi?forum' Cross-Site Scripting EDB-ID: 26861 CVE: 2005-4307 类型: WEBAPPS 平台: CGI 发布日期: 2005-12-16 漏洞利用脚本: source: https://www.securityfocus.com/bid/15915/info

ScareCrow is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks.

These issues affect version 2.13; other versions may also be vulnerable.

http://www.example.com/forum.cgi?forum=[XSS] URL: https://www.exploit-db.com/exploits/26861
标题: EZDatabase 2.1.2 - 'index.php?db_id' SQL Injection EDB-ID: 26854 CVE: 2005-4303 类型: WEBAPPS 平台: PHP 发布日期: 2005-12-16 漏洞利用脚本: source: https://www.securityfocus.com/bid/15908/info
 
ezDatabase is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.
 
ezDatabase is prone to an SQL injection vulnerability and a local file include vulnerability. Successful exploitation of these issues may result in the disclosure of sensitive information, a compromise of the database or the execution of arbitrary local server-side script code. This may facilitate a compromise of the underlying system; other attacks are also possible.
 
This issue affects version 2.1.2; other versions may also be affected.

http://www.example.com/index.php?p=getcat&db_id=[SQL] URL: https://www.exploit-db.com/exploits/26854
标题: ScareCrow 2.13 - 'post.cgi?forum' Cross-Site Scripting EDB-ID: 26863 CVE: 2005-4307 类型: WEBAPPS 平台: CGI 发布日期: 2005-12-16 漏洞利用脚本: source: https://www.securityfocus.com/bid/15915/info
  
ScareCrow is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.
  
An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks.
  
These issues affect version 2.13; other versions may also be vulnerable.

http://www.example.com/post.cgi?action=new&forum=[XSS] URL: https://www.exploit-db.com/exploits/26863
标题: IHTML Merchant Mall - SQL Injection EDB-ID: 26855 CVE: 2005-4330 类型: WEBAPPS 平台: PHP 发布日期: 2005-12-16 漏洞利用脚本: source: https://www.securityfocus.com/bid/15910/info

iHTML Merchant Mall is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query.

Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation. 

http://www.example.com/browse.ihtml?step=4&store=42&id=[SQL]
http://www.example.com/browse.ihtml?step=4&store=1[SQL]
http://www.example.com/browse.ihtml?step=[SQL] URL: https://www.exploit-db.com/exploits/26855
标题: EZDatabase 2.1.2 - 'index.php?p' Local File Inclusion EDB-ID: 26853 CVE: 2005-4302 类型: WEBAPPS 平台: PHP 发布日期: 2005-12-16 漏洞利用脚本: source: https://www.securityfocus.com/bid/15908/info

ezDatabase is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.

ezDatabase is prone to an SQL injection vulnerability and a local file include vulnerability. Successful exploitation of these issues may result in the disclosure of sensitive information, a compromise of the database or the execution of arbitrary local server-side script code. This may facilitate a compromise of the underlying system; other attacks are also possible.

This issue affects version 2.1.2; other versions may also be affected.

http://www.example.com/index.php?p=../Local file URL: https://www.exploit-db.com/exploits/26853
标题: ScareCrow 2.13 - 'profile.cgi?user' Cross-Site Scripting EDB-ID: 26862 CVE: 2005-4307 类型: WEBAPPS 平台: CGI 发布日期: 2005-12-16 漏洞利用脚本: source: https://www.securityfocus.com/bid/15915/info
 
ScareCrow is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.
 
An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks.
 
These issues affect version 2.13; other versions may also be vulnerable.

http://www.example.com/profile.cgi?action=view&user=[XSS] URL: https://www.exploit-db.com/exploits/26862
标题: WebCal 3.0 4 - 'webcal.cgi' Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 26865 CVE: 2005-4327 类型: WEBAPPS 平台: CGI 发布日期: 2005-12-16 漏洞利用脚本: source: https://www.securityfocus.com/bid/15917/info

WebCal is prone to multiple HTML injection and cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in dynamically generated content.

Attacker-supplied HTML and script code would be executed in the context of the affected Web site, potentially allowing for theft of cookie-based authentication credentials. An attacker could also exploit the HTML injection issue to control how the site is rendered to the user; other attacks are also possible.

These issues affect version 3.04; earlier versions may also be vulnerable. 

http://www.example.com/perl/webcal.cgi?function=<script>alert(document.cookie)</script>&cal=public
http://www.example.com/perl/webcal.cgi?function=webyear&cal=public&year=<script>alert(document.cookie)</script>
http://www.example.com/perl/webcal.cgi?function=webday&cal=public&date=<script>alert(document.cookie)</script> URL: https://www.exploit-db.com/exploits/26865
标题: Binary Board System 0.2.5 - 'reply.pl' Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 26858 CVE: 2005-4333 类型: WEBAPPS 平台: CGI 发布日期: 2005-12-16 漏洞利用脚本: source: https://www.securityfocus.com/bid/15913/info

binary board system is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks.

This issue affects version 0.2.5; earlier versions may also be vulnerable. 

http://www.example.com/reply.pl?board=1&article=81&inreplyto=[XSS]&[member]=yes
http://www.example.com/reply.pl?board=1&article=[XSS]&inreplyto=0&[member]=yes
http://www.example.com/reply.pl?board=[XSS]&article=81&inreplyto=&[member]=yes URL: https://www.exploit-db.com/exploits/26858
标题: Kryptronic ClickCartPro 5.1/5.2 - 'CP-APP.cgi' Cross-Site Scripting EDB-ID: 26851 CVE: 2005-4293 类型: WEBAPPS 平台: CGI 发布日期: 2005-12-15 漏洞利用脚本: source: https://www.securityfocus.com/bid/15896/info

Kryptronic ClickCartPro is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks. 

http://www.example.com/cp-app.cgi?usr=51H4515590&rnd=577308&rrc=N&affl=%22%3E%3Cscript%3Ealert('r0t')%3C/script%3E URL: https://www.exploit-db.com/exploits/26851
标题: Dick Copits PDEstore 1.8 - Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 26852 CVE: 2005-4285 类型: WEBAPPS 平台: CGI 发布日期: 2005-12-15 漏洞利用脚本: source: https://www.securityfocus.com/bid/15898/info

Dick Copits PDEstore is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks.

Version 1.8 of PDEstore is affected by these issues. Other versions may also be affected. 

http://www.example.com/pdestore.cgi?product=%22%3E%3Cscript%3Ealert('r0t')%3C/script%3E
http://www.example.com/pdestore.cgi?product=jewelry&cart_id=%22%3E%3Cscript%3Ealert('r0t')%3C/script%3E URL: https://www.exploit-db.com/exploits/26852
标题: PPCal Shopping Cart 3.3 - Cross-Site Scripting EDB-ID: 26850 CVE: 2005-4314 类型: WEBAPPS 平台: CGI 发布日期: 2005-12-15 漏洞利用脚本: source: https://www.securityfocus.com/bid/15892/info

PPCal Shopping Cart is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

http://www.example.com/ppcal.cgi?action=shop&user=8001&start=21
&stop=%22%3E%3Cscript%3Ealert('r0t')%3C
/script%3E

http://www.example.com/ppcal.cgi?action=shop&user=%22%3E%3Cscri
pt%3Ealert('r0t')%3C/script%3E URL: https://www.exploit-db.com/exploits/26850
标题: ECTOOLS Onlineshop 1.0 - Cross-Site Scripting EDB-ID: 26849 CVE: 2005-4291 类型: WEBAPPS 平台: CGI 发布日期: 2005-12-15 漏洞利用脚本: source: https://www.securityfocus.com/bid/15891/info

ECTOOLS Onlineshop is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks. 

http://www.example.com/cart.cgi?action=link&product=%22%3E%3Cscri
pt%3Ealert('r0t')%3C/script%3E

http://www.example.com/cart.cgi?action=search&category=%22%3E%3Cs
cript%3Ealert('r0t')%3C/script%3E

http://www.example.com/cart.cgi?action=link&product=33&uid=%22%3E
%3Cscript%3Ealert('r0t')%3C/script%3E URL: https://www.exploit-db.com/exploits/26849
标题: AltantForum 4.0.2 - Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 26846 CVE: 2005-4298 类型: WEBAPPS 平台: CGI 发布日期: 2005-12-15 漏洞利用脚本: source: https://www.securityfocus.com/bid/15887/info

AtlantForum is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks.

http://www.example.com/atl.cgi?ct=&md=search&brf=&before=&sch_allsubct=%22%3E%3Cscript%3Ealert('r0t')%3C/script%3E
http://www.example.com/atl.cgi?ct=&md=search&brf=&before=%22%3E%3Cscript%3Ealert('r0t')%3C/script%3E
http://www.example.com/atl.cgi?ct=%22%3E%3Cscript%3Ealert('r0t')%3C/script%3E URL: https://www.exploit-db.com/exploits/26846
标题: Sitenet BBS 2.0 - 'netboardr.cgi' Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 26842 CVE: 2005-4306 类型: WEBAPPS 平台: CGI 发布日期: 2005-12-15 漏洞利用脚本: source: https://www.securityfocus.com/bid/15883/info

SiteNet BBS is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks. 

http://example.com/netboardr.cgi?fid=929&cid=926&tid=965&pg=[XSS]
http://example.com/netboardr.cgi?fid=929&cid=926&tid=[XSS]
http://example.com/netboardr.cgi?fid=929&cid=[XSS]
http://example.com/netboardr.cgi?fid=[XSS] URL: https://www.exploit-db.com/exploits/26842
标题: DCForum 1-6 DCBoard Script - 'Page' Cross-Site Scripting EDB-ID: 26844 CVE: 2005-4311 类型: WEBAPPS 平台: PHP 发布日期: 2005-12-15 漏洞利用脚本: source: https://www.securityfocus.com/bid/15885/info

DCForum is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks.

/dcboard.php?az=show_topic&forum=46&topic_id=2215&mesg_id=2215&page=[XSS] URL: https://www.exploit-db.com/exploits/26844
标题: eDatCat 3.0 - EDCstore.pl Cross-Site Scripting EDB-ID: 26847 CVE: 2005-4289 类型: WEBAPPS 平台: CGI 发布日期: 2005-12-15 漏洞利用脚本: source: https://www.securityfocus.com/bid/15889/info

eDatCat is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks. 

http://www.example.com/EDCstore.pl?user_action=%22%3E%3Cscript%3Ealert('r0t')%3C/script%3E URL: https://www.exploit-db.com/exploits/26847