ID de Prueba:	1.3.6.1.4.1.25623.1.0.105224
Categoría:	Web application abuses
Título:	Magento Multiple Cross Site Scripting Vulnerabilities
Resumen:	This web application is running with Magento which is prone to; multiple cross-site scripting because the application fails to properly sanitize user-supplied input.
Descripción:	Summary: This web application is running with Magento which is prone to multiple cross-site scripting because the application fails to properly sanitize user-supplied input. Vulnerability Impact: Attacker-supplied HTML and script code would execute in the context of the affected site, potentially allowing the attacker to steal cookie-based authentication credentials. Affected Software/OS: Magento 1.2.0 is vulnerable. Other versions may also be affected. Solution: Check for updated versions of Magento. CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2009-0541 BugTraq ID: 33872 http://www.securityfocus.com/bid/33872 http://archives.neohapsis.com/archives/fulldisclosure/2009-02/0257.html http://securitytracker.com/id?1021746 http://secunia.com/advisories/34000 XForce ISS Database: magento-forgotpasswordaction-xss(48877) https://exchange.xforce.ibmcloud.com/vulnerabilities/48877 XForce ISS Database: magento-login-xss(48876) https://exchange.xforce.ibmcloud.com/vulnerabilities/48876 XForce ISS Database: magneto-downloader-xss(48878) https://exchange.xforce.ibmcloud.com/vulnerabilities/48878
Copyright	Copyright (C) 2015 SCHUTZWERK GmbH

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.