Web application abuses : PunBB URL Quote Tag XSS

Búsqueda de Vulnerabilidad		Buscar 324607 Descripciones CVE y 146377 Descripciones de Pruebas, accesos 10,000+ referencias cruzadas.
	Pruebas CVE Todos

ID de Prueba: 1.3.6.1.4.1.25623.1.0.15941

Categoría: Web application abuses

Título: PunBB URL Quote Tag XSS

Resumen: According to its banner, the remote version of PunBB is vulnerable to; cross-site scripting flaws because the application does not validate URL and quote tags.

Descripción: Summary:
According to its banner, the remote version of PunBB is vulnerable to
cross-site scripting flaws because the application does not validate URL and quote tags.

Vulnerability Impact:
With a specially-crafted URL, an attacker may be able to inject arbitrary
HTML and script code into a user's browser, resulting in a loss of integrity.

Solution:
Upgrade to PunBB version 1.1.5 or later.

CVSS Score:
4.3

CVSS Vector:
AV:N/AC:M/Au:N/C:N/I:P/A:N

Copyright Copyright (C) 2004 David Maciejak

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa.
Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.

ID de Prueba:	1.3.6.1.4.1.25623.1.0.15941
Categoría:	Web application abuses
Título:	PunBB URL Quote Tag XSS
Resumen:	According to its banner, the remote version of PunBB is vulnerable to; cross-site scripting flaws because the application does not validate URL and quote tags.
Descripción:	Summary: According to its banner, the remote version of PunBB is vulnerable to cross-site scripting flaws because the application does not validate URL and quote tags. Vulnerability Impact: With a specially-crafted URL, an attacker may be able to inject arbitrary HTML and script code into a user's browser, resulting in a loss of integrity. Solution: Upgrade to PunBB version 1.1.5 or later. CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Copyright	Copyright (C) 2004 David Maciejak