|
Family: CGI abuses : XSS --> Category: infos
My Little Forum XSS Vulnerability Vulnerability Scan
Vulnerability Scan Summary Detect My Little Forum XSS
Detailed Explanation for this Vulnerability Test
The remote host is running 'My Little Forum', a free CGI suite to manage
discussion forums.
This PHP/MySQL based forum suffers from a Cross Site Scripting vulnerability.
This can be exploited by including arbitrary HTML or even JavaScript code in
the parameters (forum_contact, category and page), which will be executed in
user's browser session when viewed.
Threat Level: Medium
Click HERE for more information and discussions on this network vulnerability scan.
|