Vulnerability   
Search   
    Search 324607 CVE descriptions
and 145615 test descriptions,
access 10,000+ cross references.
Tests   CVE   All  

Test ID:1.3.6.1.4.1.25623.1.0.900509
Category:Web application abuses
Title:ESET Remote Administrator XSS Vulnerability
Summary:ESET Remote Administrator is prone to a remote Cross-Site Scripting vulnerability.
Description:Summary:
ESET Remote Administrator is prone to a remote Cross-Site Scripting vulnerability.

Vulnerability Insight:
This vulnerability exists in the Additional Report Settings interface which
fails to properly sanitize user supplied input before using it in dynamically
generated content. As a result the host becomes vulnerable to arbitrary web
script or HTML code injection.

Vulnerability Impact:
Successful explotiation will allow the attacker to execute arbitrary
code in the scope of the application and can compromise the way the site is
rendered to the user.

Affected Software/OS:
ESET Remote Administrator version prior to 3.0.105 on Windows.

Solution:
Upgrade to the version 3.0.105.

CVSS Score:
4.3

CVSS Vector:
AV:N/AC:M/Au:N/C:N/I:P/A:N

Cross-Ref: Common Vulnerability Exposure (CVE) ID: CVE-2009-0548
http://osvdb.org/51804
http://secunia.com/advisories/33805
http://www.vupen.com/english/advisories/2009/0339
CopyrightCopyright (C) 2009 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit.

To run a free test of this vulnerability against your system, register below.




© 1998-2025 E-Soft Inc. All rights reserved.