Test ID:	1.3.6.1.4.1.25623.1.0.19394
Category:	Web application abuses
Title:	JAWS HTML injection vulnerabilities
Summary:	The remote version of JAWS does not perform a proper validation of; user-supplied input to several variables used in the 'GlossaryModel.php' script, and is therefore; vulnerable to cross-site scripting attacks.
Description:	Summary: The remote version of JAWS does not perform a proper validation of user-supplied input to several variables used in the 'GlossaryModel.php' script, and is therefore vulnerable to cross-site scripting attacks. Solution: Upgrade to JAWS 0.5.2 or later. CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2005-1231 BugTraq ID: 13254 http://www.securityfocus.com/bid/13254 http://seclists.org/lists/fulldisclosure/2005/Apr/0416.html http://www.securiteam.com/unixfocus/5RP0M0AFFS.html Common Vulnerability Exposure (CVE) ID: CVE-2005-1800 BugTraq ID: 13796 http://www.securityfocus.com/bid/13796 http://lists.grok.org.uk/pipermail/full-disclosure/2005-May/034354.html
Copyright	Copyright (C) 2005 Josh Zlatin-Amishav

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.