Test ID:	1.3.6.1.4.1.25623.1.0.15480
Category:	Web application abuses
Title:	XOOPS viewtopic.php Cross Site Scripting Vulnerability
Summary:	The remote web server contains a PHP script that is prone to cross-; site scripting attacks.
Description:	Summary: The remote web server contains a PHP script that is prone to cross- site scripting attacks. Vulnerability Insight: The weblinks module of XOOPS contains a file named 'viewtopic.php' in the '/modules/newbb' directory. The code of the module insufficiently filters out user provided data. Vulnerability Impact: The URL parameter used by 'viewtopic.php' can be used to insert malicious HTML and/or JavaScript in to the web page. Solution: No known solution was made available for at least one year since the disclosure of this vulnerability. Likely none will be provided anymore. General solution options are to upgrade to a newer release, disable respective features, remove the product or replace the product by another one. CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2004-2756 BugTraq ID: 9497 http://www.securityfocus.com/bid/9497 http://securitytracker.com/id?1008849
Copyright	Copyright (C) 2004 David Maciejak

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.