Test Kennung:	1.3.6.1.4.1.25623.1.0.802958
Kategorie:	Web Servers
Titel:	Arbor Networks Peakflow SP 'index/' Cross Site Scripting Vulnerability
Zusammenfassung:	Arbor Networks Peakflow SP is prone to a cross-site scripting (XSS) vulnerability.
Beschreibung:	Summary: Arbor Networks Peakflow SP is prone to a cross-site scripting (XSS) vulnerability. Vulnerability Insight: Input appended to the URL after 'index/' in the login interface is not properly sanitised before being returned to the user. Vulnerability Impact: Successful exploitation will allow remote attackers to insert arbitrary HTML and script code, which will be executed in a user's browser session in the context of an affected site. Affected Software/OS: Arbor Networks Peakflow SP 5.1.1 before patch 6, 5.5 before patch 4, and 5.6.0 before patch 1 Solution: Upgrade to Arbor Networks Peakflow SP 5.1.1 patch 6, 5.5 patch 4, 5.6.0 patch 1 or later. CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2012-4685 BugTraq ID: 52881 http://www.securityfocus.com/bid/52881 Bugtraq: 20120403 Arbor Networks Peakflow SP web interface XSS (Google Search) http://archives.neohapsis.com/archives/bugtraq/2012-04/0019.html Bugtraq: 20120404 Re: Arbor Networks Peakflow SP web interface XSS (Google Search) http://archives.neohapsis.com/archives/bugtraq/2012-04/0036.html http://archives.neohapsis.com/archives/bugtraq/2012-04/0037.html http://secunia.com/advisories/48728 XForce ISS Database: peakflowsp-login-xss(74648) https://exchange.xforce.ibmcloud.com/vulnerabilities/74648
Copyright	Copyright (C) 2012 Greenbone AG

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.