ID de Prueba:	1.3.6.1.4.1.25623.1.0.14665
Categoría:	Web application abuses
Título:	CuteNews index.php XSS
Resumen:	The version of CuteNews installed on the remote host is; vulnerable to a cross-site-scripting (XSS) attack.
Descripción:	Summary: The version of CuteNews installed on the remote host is vulnerable to a cross-site-scripting (XSS) attack. Vulnerability Impact: An attacker, exploiting this flaw, would need to be able to coerce a user to browse to a purposefully malicious URI. Upon successful exploitation, the attacker would be able to run code within the web-browser in the security context of the CuteNews server. Solution: Upgrade to the latest version. CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2004-1659 BugTraq ID: 11097 http://www.securityfocus.com/bid/11097 Bugtraq: 20040902 [hackgen-2004-#001] - Non-critacal Cross-Site Scripting bug in CuteNews (Google Search) http://marc.info/?l=bugtraq&m=109415338521881&w=2 http://secunia.com/advisories/12432 XForce ISS Database: cutenews-mod-xss(17214) https://exchange.xforce.ibmcloud.com/vulnerabilities/17214
Copyright	Copyright (C) 2004 David Maciejak

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.