CGI abuses : Blog:CMS Image Upload HTML Injection Vulnerability

Búsqueda de Vulnerabilidad		Buscar 324607 Descripciones CVE y 146377 Descripciones de Pruebas, accesos 10,000+ referencias cruzadas.
	Pruebas CVE Todos

ID de Prueba: 1.3.6.1.4.1.25623.1.0.56986

Categoría: CGI abuses

Título: Blog:CMS Image Upload HTML Injection Vulnerability

Resumen: NOSUMMARY

Descripción: Description:

The remote version of Blog:CMS, according to its version
number, is vulnerable to an injection attack that allows an
attacker to upload HTML and script code to the site,
facilitating the theft of cookie based credentials along with
other cross site scripting attacks. Only users using Microsoft
Internet Explorer to visit a compromised site are vulnerable.

Versions prior to 4.0.0e are known to be vulnerable.

Solution : Upgrade to 4.0.0e or later.

Risk factor : Medium

Referencia Cruzada: BugTraq ID: 15322

Copyright Copyright (c) 2006 E-Soft Inc. http://www.securityspace.com

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa.
Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.

ID de Prueba:	1.3.6.1.4.1.25623.1.0.56986
Categoría:	CGI abuses
Título:	Blog:CMS Image Upload HTML Injection Vulnerability
Resumen:	NOSUMMARY
Descripción:	Description: The remote version of Blog:CMS, according to its version number, is vulnerable to an injection attack that allows an attacker to upload HTML and script code to the site, facilitating the theft of cookie based credentials along with other cross site scripting attacks. Only users using Microsoft Internet Explorer to visit a compromised site are vulnerable. Versions prior to 4.0.0e are known to be vulnerable. Solution : Upgrade to 4.0.0e or later. Risk factor : Medium
Referencia Cruzada:	BugTraq ID: 15322
Copyright	Copyright (c) 2006 E-Soft Inc. http://www.securityspace.com