Detections
Analytics
BasiliX Message Content XSS
medium Nessus Plugin ID 14218
Language:
Synopsis
The remote web server contains PHP scripts that are prone to cross-site scripting attacks.Description
The remote host appears to be running a BasiliX version 1.1.0 or lower. Such versions are vulnerable to cross-scripting attacks since they do not filter HTML tags when showing a message. As a result, an attacker can include arbitrary HTML and script code in a message and have that code executed by the user's browser when it is viewed.Solution
Upgrade to BasiliX version 1.1.1 or later.See Also
Plugin Details
Severity: Medium
ID: 14218
File Name: basilix_message_content_script_injection.nasl
Version: 1.24
Type: remote
Family: CGI abuses : XSS
Published: 8/9/2004
Updated: 1/19/2021
Supported Sensors: Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 6.7
CVSS v2
Risk Factor: Medium
Base Score: 4.3
Temporal Score: 3.7
Vector: CVSS2#AV:N/AC:M/Au:N/C:N/I:P/A:N
Vulnerability Information
Required KB Items: www/basilix
Exploit Ease: No exploit is required
Vulnerability Publication Date: 6/18/2002
Reference Information
CVE: CVE-2002-1708
BID: 5060