CGI abuses : CuteNews Comment HTML Injection Vulnerability

Anfälligkeitssuche		Suche in 324607 CVE Beschreibungen und 146377 Test Beschreibungen, Zugriff auf 10,000+ Quellverweise.
	Tests CVE Alle

Test Kennung: 1.3.6.1.4.1.25623.1.0.55369

Kategorie: CGI abuses

Titel: CuteNews Comment HTML Injection Vulnerability

Zusammenfassung: NOSUMMARY

Beschreibung: Description:

The remote version of CuteNews, according to its version
number, is vulnerable to HTML injection attacks
as a result of insufficient sanitization of user supplied
input. Attackers can cause arbitrary HTML to be rendered
in a user's browser, which may lead to theft of login
credentials and other cross site scripting attacks.

Versions up to and including 1.3.1 are known to be vulnerable.

Solution : Upgrade to a later version.

Risk factor : High

Querverweis: BugTraq ID: 10750

Copyright Copyright (c) 2005 E-Soft Inc. http://www.securityspace.com

Dies ist nur einer von 146377 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus.
Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.

Test Kennung:	1.3.6.1.4.1.25623.1.0.55369
Kategorie:	CGI abuses
Titel:	CuteNews Comment HTML Injection Vulnerability
Zusammenfassung:	NOSUMMARY
Beschreibung:	Description: The remote version of CuteNews, according to its version number, is vulnerable to HTML injection attacks as a result of insufficient sanitization of user supplied input. Attackers can cause arbitrary HTML to be rendered in a user's browser, which may lead to theft of login credentials and other cross site scripting attacks. Versions up to and including 1.3.1 are known to be vulnerable. Solution : Upgrade to a later version. Risk factor : High
Querverweis:	BugTraq ID: 10750
Copyright	Copyright (c) 2005 E-Soft Inc. http://www.securityspace.com