Vulnerability   
Search   
    Search 324607 CVE descriptions
and 145615 test descriptions,
access 10,000+ cross references.
Tests   CVE   All  

Test ID:1.3.6.1.4.1.25623.1.0.11950
Category:Web application abuses
Title:RemotelyAnywhere Cross Site Scripting
Summary:The remote RemotelyAnywhere web interface is vulnerable to a cross site; scripting issue.
Description:Summary:
The remote RemotelyAnywhere web interface is vulnerable to a cross site
scripting issue.

Vulnerability Impact:
A vulnerability in RemotelyAnywhere's web interface allows a remote
attacker to inject malicious text into the login screen, this can be used by an attacker to make the
user do things he would otherwise not do (for example, change his password after a successful login to
some string provided by the malicious text).

Solution:
Upgrade to the newest version of this software.

CVSS Score:
2.6

CVSS Vector:
AV:N/AC:H/Au:N/C:P/I:N/A:N

CopyrightCopyright (C) 2003 Noam Rathaus

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit.

To run a free test of this vulnerability against your system, register below.




© 1998-2025 E-Soft Inc. All rights reserved.