Web application abuses : PunBB profile.php XSS

Búsqueda de Vulnerabilidad		Buscar 324607 Descripciones CVE y 146377 Descripciones de Pruebas, accesos 10,000+ referencias cruzadas.
	Pruebas CVE Todos

ID de Prueba: 1.3.6.1.4.1.25623.1.0.15940

Categoría: Web application abuses

Título: PunBB profile.php XSS

Resumen: According to its banner, the version of PunBB installed on the remote; host fails to properly sanitize user input to the script 'profile.php'.

Descripción: Summary:
According to its banner, the version of PunBB installed on the remote
host fails to properly sanitize user input to the script 'profile.php'.

Vulnerability Impact:
With a specially-crafted URL, an attacker can inject
arbitrary HTML and script code into a user's browser, resulting in a
loss of integrity, theft of authentication cookies, and the like.

Solution:
Update to PunBB version 1.1.4 or later.

CVSS Score:
4.3

CVSS Vector:
AV:N/AC:M/Au:N/C:N/I:P/A:N

Copyright Copyright (C) 2004 David Maciejak

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa.
Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.

ID de Prueba:	1.3.6.1.4.1.25623.1.0.15940
Categoría:	Web application abuses
Título:	PunBB profile.php XSS
Resumen:	According to its banner, the version of PunBB installed on the remote; host fails to properly sanitize user input to the script 'profile.php'.
Descripción:	Summary: According to its banner, the version of PunBB installed on the remote host fails to properly sanitize user input to the script 'profile.php'. Vulnerability Impact: With a specially-crafted URL, an attacker can inject arbitrary HTML and script code into a user's browser, resulting in a loss of integrity, theft of authentication cookies, and the like. Solution: Update to PunBB version 1.1.4 or later. CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Copyright	Copyright (C) 2004 David Maciejak