|
Family: CGI abuses : XSS --> Category: attack
UBB.threads Cross Site Scripting Vulnerabilities Vulnerability Scan
Vulnerability Scan Summary XSS UBB.threads
Detailed Explanation for this Vulnerability Test
Synopsis :
The remote web server contains a PHP script that is prone to
various cross-site scripting attacks.
Description :
There are various cross-site scripting issues in the remote version of
this software. A possible hacker may exploit them to use the remote website
to inject arbitrary HTML and script code into a user's browser to be
executed within the security context of the affected web site.
See also :
http://archives.neohapsis.com/archives/fulldisclosure/2004-12/0239.html
Solution :
Upgrade to UBB.Threads version 6.5.1 or later.
Threat Level:
Low / CVSS Base Score : 3.5
(AV:R/AC:L/Au:NR/C:N/I:P/A:N/B:I)
Click HERE for more information and discussions on this network vulnerability scan.
|