ID de Prueba:	1.3.6.1.4.1.25623.1.0.800263
Categoría:	Web application abuses
Título:	ExpressionEngine CMS Cross Site Scripting Vulnerability
Resumen:	ExpressionEngine CMS is prone to a Cross Site Scripting vulnerability.
Descripción:	Summary: ExpressionEngine CMS is prone to a Cross Site Scripting vulnerability. Vulnerability Insight: Inadequate validation of user supplied input to the system/index.php script leads to cross site attacks. Vulnerability Impact: Successful exploitation will allow remote attackers to inject arbitrary HTML codes in an image by tricking the user to view a malicious profile page. Affected Software/OS: ExpressionEngine versions prior to 1.6.7 on all platforms. Solution: Update ExpressionEngine to version 1.6.7. CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2009-1070 BugTraq ID: 34193 http://www.securityfocus.com/bid/34193 Bugtraq: 20090322 ExpressionEngine Persistent Cross-Site Scripting (Google Search) http://www.securityfocus.com/archive/1/502045/100/0/threaded http://www.ngenuity.org/wordpress/2009/01/28/ngenuity-2009-003-expressionengine-persistent-cross-site-scripting/ http://secunia.com/advisories/34379 XForce ISS Database: expressionengine-avatar-xss(49359) https://exchange.xforce.ibmcloud.com/vulnerabilities/49359
Copyright	Copyright (C) 2009 Greenbone AG

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.