Vulnerability Scanning Solutions, LLC.
Home
Our Process
Residential
Corporate
What We Scan For
Sample Report
Client List
Terms
Contact Us
What We Scan For
Family: CGI abuses : XSS --> Category: infos

Xitami Cross Site Scripting Vulnerability Vulnerability Scan


Vulnerability Scan Summary
Xitami XSS test

Detailed Explanation for this Vulnerability Test

Synopsis :

The remote web server contains a script that is affected by a cross-
site scripting flaw.

Description :

The remote Xitami server is distributed with a script for testing
server-side includes, '/testssi.ssi'. This script is vulnerable to a
cross-site scripting issue when sent a request with a malformed Host
or User-Agent header. A possible hacker may exploit this flaw the steal the
authentication credentials of third-party users.

See also :

http://www.oliverkarow.de/research/xitami25c1_testssi_XSS.txt

Solution :

Remove the test script '/testssi.ssi'.

Threat Level:

Low / CVSS Base Score : 2
(AV:R/AC:L/Au:NR/C:P/A:N/I:N/B:N)

Click HERE for more information and discussions on this network vulnerability scan.

VSS, LLC.

P.O. Box 827051

Pembroke Pines, FL 33082-7051

Vulnerability Scanning Solutions, LLC.