Test Kennung:	1.3.6.1.4.1.25623.1.0.14614
Kategorie:	CGI abuses
Titel:	XOOPS Dictionary Module Cross Scripting Vulnerability
Zusammenfassung:	NOSUMMARY
Beschreibung:	Description: The remote host is running the Xoops Dictionary module. The remote version of this software is vulnerable to a cross-site scripting attack. An attacker can exploit it by compromising the parameters to the files letter.php This can be used to take advantage of the trust between a client and server allowing the malicious user to execute malicious JavaScript on the client's machine. Solution : Upgrade to the latest version of this software Risk factor: Medium
Querverweis:	BugTraq ID: 11064 Common Vulnerability Exposure (CVE) ID: CVE-2004-1640 http://www.securityfocus.com/bid/11064 Bugtraq: 20040828 Cross Site Scripting in XOOPS Version 2.x Dictionary module (Google Search) http://marc.info/?l=bugtraq&m=109394077209963&w=2 http://cyruxnet.org/modulo_dic_xoops.htm http://www.osvdb.org/9393 http://www.osvdb.org/9394 http://secunia.com/advisories/12424 XForce ISS Database: xoops-dictionary-letter-xss(17154) https://exchange.xforce.ibmcloud.com/vulnerabilities/17154 XForce ISS Database: xoops-dictionary-search-xss(17152) https://exchange.xforce.ibmcloud.com/vulnerabilities/17152
Copyright	This script is Copyright (C) 2004 Tenable Network Security

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.