Vulnerability Scanning Solutions, LLC.
Home
Our Process
Residential
Corporate
What We Scan For
Sample Report
Client List
Terms
Contact Us
What We Scan For
Family: CGI abuses : XSS --> Category: infos

OSCommerce Contact_us.PHP Cross-Site Scripting Vulnerability Vulnerability Scan


Vulnerability Scan Summary
Acertains the presence of OSCommerce

Detailed Explanation for this Vulnerability Test

The remote host is running OSCommerce, a web based ecommerce suite
written in PHP.


This version of OSCommerce is vulnerable to a Cross-Site-Scripting (XSS)
attack.
A possible hacker, exploiting this flaw, would need to be able to coerce
an unsuspecting user into visiting a malicious website. Upon
successful exploitation, the attacker would be able to possibly
steal credentials or execute browser-side code.

Solution : Upgrade to a newer version when available
Threat Level: Medium

Click HERE for more information and discussions on this network vulnerability scan.

VSS, LLC.

P.O. Box 827051

Pembroke Pines, FL 33082-7051

Vulnerability Scanning Solutions, LLC.