|
|
Family: CGI abuses : XSS --> Category: infos
MySQL Eventum Multiple flaws Vulnerability Scan
Vulnerability Scan Summary
Test flaws in MySQL Eventum
Detailed Explanation for this Vulnerability Test
The remote host seems to be running MySQL Eventum, a user-friendly
and flexible issue tracking system written in PHP.
The remote version of this software is vulnerable to cross-site scripting
attacks, through multiple scripts.
With a specially crafted URL, a possible hacker can use the remote server to
perform an attack against third party users of the remote service, in order
to steal their credentials.
Solution: No update available yet
Threat Level: Medium
Click HERE for more information and discussions on this network vulnerability scan.
|
