Anfälligkeitssuche        Suche in 219043 CVE Beschreibungen
und 99761 Test Beschreibungen,
Zugriff auf 10,000+ Quellverweise.
Tests   CVE   Alle  

Test Kennung:1.3.6.1.4.1.25623.1.0.10815
Kategorie:Web Servers
Titel:Web Server Cross Site Scripting
Zusammenfassung:The remote web server seems to be vulnerable to a Cross Site Scripting; vulnerability (XSS). The vulnerability is caused by the result being returned to the user when a non-existing; file is requested (e.g. the result contains script code provided in the request).
Beschreibung:Summary:
The remote web server seems to be vulnerable to a Cross Site Scripting
vulnerability (XSS). The vulnerability is caused by the result being returned to the user when a non-existing
file is requested (e.g. the result contains script code provided in the request).

Vulnerability Impact:
This vulnerability would allow an attacker to make the server present the
user with the attacker's JavaScript/HTML code.

Since the content is presented by the server, the user will give it the trust level of the server (for example,
the websites banks, shopping centers, etc. would usually be trusted by a user).

Solution:
See the references for various background information.

CVSS Score:
4.3

CVSS Vector:
AV:N/AC:M/Au:N/C:N/I:P/A:N

CopyrightCopyright (C) 2005 SecuriTeam, modified by Chris Sullo and Andrew Hintz

Dies ist nur einer von 99761 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus.

Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.




© 1998-2024 E-Soft Inc. Alle Rechte vorbehalten.