ID de Prueba:	1.3.6.1.4.1.25623.1.0.140301
Categoría:	Web application abuses
Título:	Biscom Secure File Transfer XSS Vulnerability
Resumen:	Biscom Secure File Transfer is prone to a cross-site scripting;vulnerability.
Descripción:	Summary: Biscom Secure File Transfer is prone to a cross-site scripting vulnerability. Vulnerability Insight: The Workspaces component of Biscom Secure File Transfer (SFT) is vulnerable to stored cross-site scripting in two fields. An attacker would need to have the ability to create a Workspace and entice a victim to visit the malicious page in order to run malicious Javascript in the context of the victim's browser. Since the victim is necessarily authenticated, this can allow the attacker to perform actions on the Biscom Secure File Transfer instance on the victim's behalf. Affected Software/OS: Synology Photo Station before 5.1.1025. Solution: Update to version 5.1.1025 or later. CVSS Score: 3.5 CVSS Vector: AV:N/AC:M/Au:S/C:N/I:P/A:N
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2017-5241 BugTraq ID: 99341 http://www.securityfocus.com/bid/99341 https://community.rapid7.com/community/infosec/blog/2017/06/27/r7-2017-06-biscom-sftp-xss-cve-2017-5241
Copyright	Copyright (C) 2017 Greenbone Networks GmbH

Esta es sólo una de 99761 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.