Test ID:	1.3.6.1.4.1.25623.1.0.14614
Category:	CGI abuses
Title:	XOOPS Dictionary Module Cross Scripting Vulnerability
Summary:	NOSUMMARY
Description:	Description: The remote host is running the Xoops Dictionary module. The remote version of this software is vulnerable to a cross-site scripting attack. An attacker can exploit it by compromising the parameters to the files letter.php This can be used to take advantage of the trust between a client and server allowing the malicious user to execute malicious JavaScript on the client's machine. Solution : Upgrade to the latest version of this software Risk factor: Medium
Cross-Ref:	BugTraq ID: 11064 Common Vulnerability Exposure (CVE) ID: CVE-2004-1640 http://www.securityfocus.com/bid/11064 Bugtraq: 20040828 Cross Site Scripting in XOOPS Version 2.x Dictionary module (Google Search) http://marc.info/?l=bugtraq&m=109394077209963&w=2 http://cyruxnet.org/modulo_dic_xoops.htm http://www.osvdb.org/9393 http://www.osvdb.org/9394 http://secunia.com/advisories/12424 XForce ISS Database: xoops-dictionary-letter-xss(17154) https://exchange.xforce.ibmcloud.com/vulnerabilities/17154 XForce ISS Database: xoops-dictionary-search-xss(17152) https://exchange.xforce.ibmcloud.com/vulnerabilities/17152
Copyright	This script is Copyright (C) 2004 Tenable Network Security

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.