Test ID:	1.3.6.1.4.1.25623.1.0.15784
Category:	CGI abuses
Title:	PHP-Kit Multiple Input Validations
Summary:	NOSUMMARY
Description:	Description: The remote host is running PHP-Kit, an open-source content management system written in PHP. The remote version of this software is vulnerable to multiple flaws which may allow an attacker to execute arbitrary SQL statements against the remote database or to perform a cross site scripting attack using the remote host. Solution : Upgrade to the newest version of PHP-Kit Risk factor : High
Cross-Ref:	BugTraq ID: 11725 Common Vulnerability Exposure (CVE) ID: CVE-2004-1538 http://www.securityfocus.com/bid/11725 Bugtraq: 20041122 PHPKIT SQL Injection, XSS (Google Search) http://marc.info/?l=bugtraq&m=110117116115493&w=2 http://secunia.com/advisories/13262 XForce ISS Database: phpkit-include-sql-injection(18205) https://exchange.xforce.ibmcloud.com/vulnerabilities/18205 Common Vulnerability Exposure (CVE) ID: CVE-2004-1537 XForce ISS Database: phpkit-popup-xss(18204) https://exchange.xforce.ibmcloud.com/vulnerabilities/18204
Copyright	This script is Copyright (C) 2004 Tenable Network Security

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.