|
|
Family: CGI abuses : XSS --> Category: attack
Interspire ArticleLive 2005 XSS Vulnerability Vulnerability Scan
Vulnerability Scan Summary
Searches for the existence of a ArticleLive XSS
Detailed Explanation for this Vulnerability Test
Synopsis:
The remote web server contains a CGI which is vulnerable to a cross site
scripting issue.
Description :
The remote host is running ArticleLive, a set of CGIs designed to simplify
the management of a news site.
Due to improper filtering done by the script 'newcomment' remote attacker
can cause the ArticleLive product to include arbitrary HTML and/or
JavaScript, and therefore use the remote host to perform cross-site
scripting attacks.
Solution :
Upgrade to the newest version of this software
Threat Level:
Low / CVSS Base Score : 3
(AV:R/AC:H/Au:NR/C:P/A:N/I:N/B:C)
Click HERE for more information and discussions on this network vulnerability scan.
|
