Test Kennung:	1.3.6.1.4.1.25623.1.0.11531
Kategorie:	CGI abuses
Titel:	PHPay Information Disclosure
Zusammenfassung:	NOSUMMARY
Beschreibung:	Description: The remote host is running PHPay, an online shop management system. This package contains multiple information leakages which may allow an attacker to obtain the physical path of the installation on the remote host or even the exact version of the components used by the remote host, by using the file admin/phpinfo.nasl which comes with it. This files make a call to phpinfo() which display a lot of information about the remote host and how PHP is configured. An attacker may use this flaw to gain a more intimate knowledge about the remote host and better prepare its attacks. In addition to this, this version is vulnerable to a cross-site-scripting issue which may let an attacker steal the cookies of your legitimate users. Solution : Upgrade to PHPay 2.2.1 or newer Risk factor : Low
Querverweis:	BugTraq ID: 7309 BugTraq ID: 7310 BugTraq ID: 7313
Copyright	This script is Copyright (C) 2003 Renaud Deraison

Dies ist nur einer von 146377 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.