ID de Prueba:	1.3.6.1.4.1.25623.1.0.19692
Categoría:	Web application abuses
Título:	CMSimple 'index.php?search' XSS Vulnerability - Active Check
Resumen:	CMSimple is prone to cross-site scripting (XSS) attacks due to; its failure to sanitize user-supplied input to the search field.
Descripción:	Summary: CMSimple is prone to cross-site scripting (XSS) attacks due to its failure to sanitize user-supplied input to the search field. Solution: Updates are available. See the references for more information. CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2005-2392 BugTraq ID: 14346 http://www.securityfocus.com/bid/14346 Bugtraq: 20060803 CMSimple Cross Site Scripting (Google Search) http://www.securityfocus.com/archive/1/442106/100/100/threaded http://lostmon.blogspot.com/2005/07/cmsimple-search-variable-xss.html http://www.aria-security.net/advisory/cmsimple.txt http://www.osvdb.org/18128 http://securitytracker.com/id?1014556 http://secunia.com/advisories/16147
Copyright	Copyright (C) 2006 Josh Zlatin-Amishav

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.