Test Kennung:	1.3.6.1.4.1.25623.1.0.902318
Kategorie:	Web application abuses
Titel:	NuSOAP 'nusoap.php' Cross Site Scripting Vulnerability
Zusammenfassung:	This host is running NuSOAP and is prone to Cross-site scripting; Vulnerability.
Beschreibung:	Summary: This host is running NuSOAP and is prone to Cross-site scripting Vulnerability. Vulnerability Insight: The flaw is due to an input validation error in /api/soap/mantisconnect.php in NuSOAP. Vulnerability Impact: Successful exploitation will allow attackers to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. Affected Software/OS: NuSOAP version 0.9.5. Solution: Apply the patch provided by vendor. CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Querverweis:	BugTraq ID: 42959 Common Vulnerability Exposure (CVE) ID: CVE-2010-3070 http://www.securityfocus.com/bid/42959 http://lists.fedoraproject.org/pipermail/package-announce/2010-September/048317.html http://lists.fedoraproject.org/pipermail/package-announce/2010-September/048325.html http://lists.fedoraproject.org/pipermail/package-announce/2010-September/048548.html http://lists.fedoraproject.org/pipermail/package-announce/2010-September/048639.html http://lists.fedoraproject.org/pipermail/package-announce/2010-September/048659.html http://sourceforge.net/mailarchive/message.php?msg_name=4C8FC573.3060900%40leetcode.net http://www.openwall.com/lists/oss-security/2010/09/03/2 http://www.openwall.com/lists/oss-security/2010/09/07/4 http://www.openwall.com/lists/oss-security/2010/09/14/12 http://www.openwall.com/lists/oss-security/2010/09/14/13 http://secunia.com/advisories/41653 http://www.vupen.com/english/advisories/2010/2535
Copyright	Copyright (C) 2010 Greenbone Networks GmbH

Dies ist nur einer von 99761 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.