Test ID:	1.3.6.1.4.1.25623.1.0.801593
Category:	Web application abuses
Title:	Oracle MySQL Eventum Multiple Cross Site Scripting Vulnerabilities
Summary:	Oracle MySQL Eventum is prone to multiple cross site scripting vulnerabilities.
Description:	Summary: Oracle MySQL Eventum is prone to multiple cross site scripting vulnerabilities. Vulnerability Insight: Multiple flaws are due to an error in '/htdocs/list.php', '/htdocs/forgot_password.php' and '/htdocs/select_project.php', which is not properly validating the input passed to the 'keywords' parameter. Vulnerability Impact: Successful exploitation will allow attacker to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may let the attacker steal cookie-based authentication credentials and launch other attacks. Affected Software/OS: MySQL Eventum version 2.2 and 2.3. Solution: Upgrade to MySQL Eventum version 2.3.1 or later. CVSS Score: 4.6 CVSS Vector: AV:N/AC:H/Au:S/C:P/I:P/A:P
Copyright	Copyright (C) 2011 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.