Web application abuses : Post-Nuke News module XSS

Anfälligkeitssuche		Suche in 219043 CVE Beschreibungen und 99761 Test Beschreibungen, Zugriff auf 10,000+ Quellverweise.
	Tests CVE Alle

Test Kennung: 1.3.6.1.4.1.25623.1.0.14727

Kategorie: Web application abuses

Titel: Post-Nuke News module XSS

Zusammenfassung: The remote host is running a version of Post-Nuke which contains; the 'News' module which itself is vulnerable to a cross site scripting issue.

Beschreibung: Summary:
The remote host is running a version of Post-Nuke which contains
the 'News' module which itself is vulnerable to a cross site scripting issue.

Vulnerability Impact:
An attacker may use these flaws to steal the cookies of the
legitimate users of this web site.

Solution:
Upgrade to the latest version of postnuke.

CVSS Score:
4.3

CVSS Vector:
AV:N/AC:M/Au:N/C:N/I:P/A:N

Querverweis: BugTraq ID: 5809

Copyright This script is Copyright (C) 2004 David Maciejak

Dies ist nur einer von 99761 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus.
Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.

Test Kennung:	1.3.6.1.4.1.25623.1.0.14727
Kategorie:	Web application abuses
Titel:	Post-Nuke News module XSS
Zusammenfassung:	The remote host is running a version of Post-Nuke which contains; the 'News' module which itself is vulnerable to a cross site scripting issue.
Beschreibung:	Summary: The remote host is running a version of Post-Nuke which contains the 'News' module which itself is vulnerable to a cross site scripting issue. Vulnerability Impact: An attacker may use these flaws to steal the cookies of the legitimate users of this web site. Solution: Upgrade to the latest version of postnuke. CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Querverweis:	BugTraq ID: 5809
Copyright	This script is Copyright (C) 2004 David Maciejak