CGI abuses : Blog:CMS Image Upload HTML Injection Vulnerability

Vulnerability Search		Search 324607 CVE descriptions and 145615 test descriptions, access 10,000+ cross references.
	Tests CVE All

Test ID: 1.3.6.1.4.1.25623.1.0.56986

Category: CGI abuses

Title: Blog:CMS Image Upload HTML Injection Vulnerability

Summary: NOSUMMARY

Description: Description:

The remote version of Blog:CMS, according to its version
number, is vulnerable to an injection attack that allows an
attacker to upload HTML and script code to the site,
facilitating the theft of cookie based credentials along with
other cross site scripting attacks. Only users using Microsoft
Internet Explorer to visit a compromised site are vulnerable.

Versions prior to 4.0.0e are known to be vulnerable.

Solution : Upgrade to 4.0.0e or later.

Risk factor : Medium

Cross-Ref: BugTraq ID: 15322

Copyright Copyright (c) 2006 E-Soft Inc. http://www.securityspace.com

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit.
To run a free test of this vulnerability against your system, register below.

Test ID:	1.3.6.1.4.1.25623.1.0.56986
Category:	CGI abuses
Title:	Blog:CMS Image Upload HTML Injection Vulnerability
Summary:	NOSUMMARY
Description:	Description: The remote version of Blog:CMS, according to its version number, is vulnerable to an injection attack that allows an attacker to upload HTML and script code to the site, facilitating the theft of cookie based credentials along with other cross site scripting attacks. Only users using Microsoft Internet Explorer to visit a compromised site are vulnerable. Versions prior to 4.0.0e are known to be vulnerable. Solution : Upgrade to 4.0.0e or later. Risk factor : Medium
Cross-Ref:	BugTraq ID: 15322
Copyright	Copyright (c) 2006 E-Soft Inc. http://www.securityspace.com