|
|
Family: Misc. --> Category: infos
Proxy Web Server Cross Site Scripting Vulnerability Scan
Vulnerability Scan Summary
Determine if the remote proxy is vulnerable to Cross Site Scripting vulnerability
Detailed Explanation for this Vulnerability Test
The remote proxy (or web server) seems to be vulnerable to the Cross Site
Scripting vulnerability (XSS). The vulnerability is caused by the result
returned to the user when a non-existing file is requested (e.g. the result contains the
JavaScript providedin the request) on a non-existing server.
The vulnerability would allow a possible hacker to make the server present the user with
the attacker's JavaScript/HTML code.
Since the content is presented by the server, the user will give it the
trust level of the server (for example, the trust level of banks, shopping centers, etc.
would usually be high).
Threat Level: Medium
Click HERE for more information and discussions on this network vulnerability scan.
|
