Description
Multiple cross-site scripting (XSS) vulnerabilities in contact_us.php in ac4p Mobilelib gold 2 allow remote attackers to inject arbitrary web script or HTML via the (1) email or (2) errr parameter.
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.
Exploit-DB 1
- Mobilelib Gold - Multiple Cross-Site Scripting Vulnerabilities EDB-29372 · webapps · Dec 29, 2006 · verified
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
References
- 34805 vdb-entry
- 21817 vdb-entry
- 20061229 Re: XSS in script Mobilelib GOLD v2 mailing-list
- 20061228 XSS in script Mobilelib GOLD v2 mailing-list