MyServer 0.6.2 math_sum.mscgi Multiple Vulnerabilities

high Nessus Plugin ID 14182

Synopsis

The remote web server is hosting a CGI application that is affected by multiple vulnerabilities.

Description

The sample CGI math_sum.mscgi is installed on the remote web server.

The remote version of this CGI contain several issues which may allow an attacker to execute a cross-site scripting attack, to disable the remote server remotely or to execute arbitrary code with the privileges of the server.

Solution

There is no known solution at this time.

See Also

http://www.nessus.org/u?5666bf3a

Plugin Details

Severity: High

ID: 14182

File Name: myserver_math_sum_flaws.nasl

Version: 1.18

Type: remote

Family: CGI abuses

Published: 8/2/2004

Updated: 1/19/2021

Supported Sensors: Nessus

Risk Information

CVSS v2

Risk Factor: High

Base Score: 7.5

Temporal Score: 6.1

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Information

Excluded KB Items: Settings/disable_cgi_scanning

Exploit Ease: No known exploits are available

Reference Information

BID: 10831

CWE: 20, 442, 629, 711, 712, 722, 725, 74, 750, 751, 79, 800, 801, 809, 811, 864, 900, 928, 931, 990