Test ID:	1.3.6.1.4.1.25623.1.0.55368
Category:	CGI abuses : XSS
Title:	CuteNews Multiple Cross-site Scripting Vulnerabilities
Summary:	NOSUMMARY
Description:	Description: The remote version of CuteNews, according to its version number, is vulnerable to multiple cross site scripting attacks involving the insufficient sanitization of the 'id' parameter passed to different scripts. Versions up to and including 1.3.1 are known to be vulnerable. Solution : Upgrade to a later version. Risk factor : High CVSS Score: 6.8
Cross-Ref:	BugTraq ID: 10620 Common Vulnerability Exposure (CVE) ID: CVE-2004-0660 Bugtraq: 20040628 Cross-Site Scripting CuteNews (Google Search) http://marc.info/?l=bugtraq&m=108844000409449&w=2 http://www.swp-zone.org/archivos/advisory-06.txt XForce ISS Database: cutenews-id-xss(16525) https://exchange.xforce.ibmcloud.com/vulnerabilities/16525
Copyright	Copyright (c) 2005 E-Soft Inc. http://www.securityspace.com

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.