Proxy Web Server XSS

This script is Copyright (C) 2003-2012 Tenable Network Security, Inc.


Synopsis :

The remote proxy server is prone to cross-site scripting attacks.

Description :

The remote host is running a proxy web server that fails to adequately
sanitize request strings of malicious JavaScript. By leveraging this
issue, an attacker may be able to cause arbitrary HTML and script code
to be executed in a user's browser within the security context of the
affected site.

Solution :

Contact the vendor for a patch or upgrade.

Risk factor :

Medium / CVSS Base Score : 4.3
(CVSS2#AV:N/AC:M/Au:N/C:N/I:P/A:N)
CVSS Temporal Score : 4.3
(CVSS2#E:H/RL:U/RC:ND)
Public Exploit Available : true

Family: Web Servers

Nessus Plugin ID: 11634 ()

Bugtraq ID: 7596

CVE ID: CVE-2003-0292