ID de Prueba:	1.3.6.1.4.1.25623.1.0.14614
Categoría:	CGI abuses
Título:	XOOPS Dictionary Module Cross Scripting Vulnerability
Resumen:	NOSUMMARY
Descripción:	Description: The remote host is running the Xoops Dictionary module. The remote version of this software is vulnerable to a cross-site scripting attack. An attacker can exploit it by compromising the parameters to the files letter.php This can be used to take advantage of the trust between a client and server allowing the malicious user to execute malicious JavaScript on the client's machine. Solution : Upgrade to the latest version of this software Risk factor: Medium
Referencia Cruzada:	BugTraq ID: 11064 Common Vulnerability Exposure (CVE) ID: CVE-2004-1640 http://www.securityfocus.com/bid/11064 Bugtraq: 20040828 Cross Site Scripting in XOOPS Version 2.x Dictionary module (Google Search) http://marc.info/?l=bugtraq&m=109394077209963&w=2 http://cyruxnet.org/modulo_dic_xoops.htm http://www.osvdb.org/9393 http://www.osvdb.org/9394 http://secunia.com/advisories/12424 XForce ISS Database: xoops-dictionary-letter-xss(17154) https://exchange.xforce.ibmcloud.com/vulnerabilities/17154 XForce ISS Database: xoops-dictionary-search-xss(17152) https://exchange.xforce.ibmcloud.com/vulnerabilities/17152
Copyright	This script is Copyright (C) 2004 Tenable Network Security

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.