Test ID:	1.3.6.1.4.1.25623.1.0.802270
Category:	Web Servers
Title:	Embedthis GoAhead 2.18 Multiple Stored XSS Vulnerabilities - Active Check
Summary:	Embedthis GoAhead is prone to multiple stored cross-site; scripting (XSS) vulnerabilities.
Description:	Summary: Embedthis GoAhead is prone to multiple stored cross-site scripting (XSS) vulnerabilities. Vulnerability Insight: Multiple flaws are due to improper validation of user-supplied input via the 'group' parameter to goform/AddGroup, related to addgroup.asp, the 'url' parameter to goform/AddAccessLimit, related to addlimit.asp, or the 'user' or 'group' parameter to goform/AddUser, related to adduser.asp Vulnerability Impact: Successful exploitation will allow remote attackers to insert arbitrary HTML and script code, which will be executed in a user's browser session in the context of an affected site. Affected Software/OS: Embedthis GoAhead version 2.18 is known to be affected. Other versions might be affected as well. Solution: Update to version 2.5 or later. CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2011-4273 CERT/CC vulnerability note: VU#384427 http://www.kb.cert.org/vuls/id/384427 http://secunia.com/advisories/46894 XForce ISS Database: goahead-multiple-xss(70434) https://exchange.xforce.ibmcloud.com/vulnerabilities/70434
Copyright	Copyright (C) 2011 Greenbone AG

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.