Test Kennung:	1.3.6.1.4.1.25623.1.0.19394
Kategorie:	Web application abuses
Titel:	JAWS HTML injection vulnerabilities
Zusammenfassung:	The remote version of JAWS does not perform a proper validation of; user-supplied input to several variables used in the 'GlossaryModel.php' script, and is therefore; vulnerable to cross-site scripting attacks.
Beschreibung:	Summary: The remote version of JAWS does not perform a proper validation of user-supplied input to several variables used in the 'GlossaryModel.php' script, and is therefore vulnerable to cross-site scripting attacks. Solution: Upgrade to JAWS 0.5.2 or later. CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Querverweis:	BugTraq ID: 13254 BugTraq ID: 13796 Common Vulnerability Exposure (CVE) ID: CVE-2005-1231 http://www.securityfocus.com/bid/13254 http://seclists.org/lists/fulldisclosure/2005/Apr/0416.html http://www.securiteam.com/unixfocus/5RP0M0AFFS.html Common Vulnerability Exposure (CVE) ID: CVE-2005-1800 http://www.securityfocus.com/bid/13796 http://lists.grok.org.uk/pipermail/full-disclosure/2005-May/034354.html
Copyright	Copyright (C) 2005 Josh Zlatin-Amishav

Dies ist nur einer von 99761 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.