|
|
Family: CGI abuses : XSS --> Category: infos
OSCommerce Contact_us.PHP Cross-Site Scripting Vulnerability Vulnerability Scan
Vulnerability Scan Summary
Acertains the presence of OSCommerce
Detailed Explanation for this Vulnerability Test
The remote host is running OSCommerce, a web based ecommerce suite
written in PHP.
This version of OSCommerce is vulnerable to a Cross-Site-Scripting (XSS)
attack.
A possible hacker, exploiting this flaw, would need to be able to coerce
an unsuspecting user into visiting a malicious website. Upon
successful exploitation, the attacker would be able to possibly
steal credentials or execute browser-side code.
Solution : Upgrade to a newer version when available
Threat Level: Medium
Click HERE for more information and discussions on this network vulnerability scan.
|
