![]() |
Startseite ▼ Bookkeeping
Online ▼ Sicherheits
Überprüfungs ▼
Verwaltetes
DNS ▼
Info
Bestellen/Erneuern
FAQ
AUP
Dynamic DNS Clients
Domaine konfigurieren Dyanmic DNS Update Password Netzwerk
Überwachung ▼
Enterprise
Erweiterte
Standard
Gratis Test
FAQ
Preis/Funktionszusammenfassung
Bestellen
Beispiele
Konfigurieren/Status Alarm Profile | ||
Test Kennung: | 1.3.6.1.4.1.25623.1.0.10815 |
Kategorie: | Web Servers |
Titel: | Web Server Cross Site Scripting |
Zusammenfassung: | The remote web server seems to be vulnerable to a cross-site; scripting (XSS) vulnerability. |
Beschreibung: | Summary: The remote web server seems to be vulnerable to a cross-site scripting (XSS) vulnerability. Vulnerability Insight: The vulnerability is caused by the result being returned to the user when a non-existing file is requested (e.g. the result contains script code provided in the request). Vulnerability Impact: This vulnerability would allow an attacker to make the server present the user with the attacker's JavaScript/HTML code. Since the content is presented by the server, the user will give it the trust level of the server (for example, the websites banks, shopping centers, etc. would usually be trusted by a user). Solution: See the references for various background information. CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N |
Copyright | Copyright (C) 2005 SecuriTeam, modified by Chris Sullo and Andrew Hintz |
Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten. |