ID de Prueba:	1.3.6.1.4.1.25623.1.0.19394
Categoría:	Web application abuses
Título:	JAWS HTML injection vulnerabilities
Resumen:	The remote version of JAWS does not perform a proper validation of; user-supplied input to several variables used in the 'GlossaryModel.php' script, and is therefore; vulnerable to cross-site scripting attacks.
Descripción:	Summary: The remote version of JAWS does not perform a proper validation of user-supplied input to several variables used in the 'GlossaryModel.php' script, and is therefore vulnerable to cross-site scripting attacks. Solution: Upgrade to JAWS 0.5.2 or later. CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2005-1231 BugTraq ID: 13254 http://www.securityfocus.com/bid/13254 http://seclists.org/lists/fulldisclosure/2005/Apr/0416.html http://www.securiteam.com/unixfocus/5RP0M0AFFS.html Common Vulnerability Exposure (CVE) ID: CVE-2005-1800 BugTraq ID: 13796 http://www.securityfocus.com/bid/13796 http://lists.grok.org.uk/pipermail/full-disclosure/2005-May/034354.html
Copyright	Copyright (C) 2005 Josh Zlatin-Amishav

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.