Test Kennung:	1.3.6.1.4.1.25623.1.0.15914
Kategorie:	Web application abuses
Titel:	Serendipity XSS Flaw
Zusammenfassung:	The remote version of Serendipity is vulnerable to cross-site scripting;attacks due to a lack of sanity checks on the 'searchTerm' parameter in;the 'compat.php' script. With a specially crafted URL, an attacker can;cause arbitrary code execution in a user's browser resulting in a loss;of integrity.
Beschreibung:	Summary: The remote version of Serendipity is vulnerable to cross-site scripting attacks due to a lack of sanity checks on the 'searchTerm' parameter in the 'compat.php' script. With a specially crafted URL, an attacker can cause arbitrary code execution in a user's browser resulting in a loss of integrity. Solution: Upgrade to Serendipity 0.7.1 or newer. CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Querverweis:	BugTraq ID: 11790 Common Vulnerability Exposure (CVE) ID: CVE-2004-2525 http://www.securityfocus.com/bid/11790 http://www.osvdb.org/12177 http://securitytracker.com/id?1012383 http://secunia.com/advisories/13357 XForce ISS Database: serendipity-combatphp-xss(18322) https://exchange.xforce.ibmcloud.com/vulnerabilities/18322
Copyright	This script is Copyright (C) 2004 David Maciejak

Dies ist nur einer von 99761 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.