AutoIndex PHP Script index.php search Parameter XSS

medium Nessus Plugin ID 19385

Synopsis

The remote web server contains a PHP script that is vulnerable to a cross-site scripting issue.

Description

The remote host is running AutoIndex, a free PHP script for indexing files in a directory.

The installed version of AutoIndex fails to properly sanitize user-supplied input to the 'search' parameter of the 'index.php' script. By leveraging this flaw, an attacker may be able to cause arbitrary HTML and script code to be executed by a user's browser within the context of the affected application, leading to cookie theft and similar attacks.

Solution

Upgrade to AutoIndex version 1.5.3 or later if using 1.x, or to version 2.1.1 or later if using 2.x.

See Also

https://seclists.org/bugtraq/2005/Jul/37

Plugin Details

Severity: Medium

ID: 19385

File Name: autoindex_search_xss.nasl

Version: 1.24

Type: remote

Published: 8/4/2005

Updated: 4/11/2022

Configuration: Enable thorough checks

Supported Sensors: Nessus

Risk Information

VPR

Risk Factor: Low

Score: 3.6

CVSS v2

Risk Factor: Medium

Base Score: 4.3

Temporal Score: 3.7

Vector: CVSS2#AV:N/AC:M/Au:N/C:N/I:P/A:N

Vulnerability Information

CPE: cpe:/a:autoindex:php_script

Required KB Items: www/PHP

Excluded KB Items: Settings/disable_cgi_scanning

Exploit Ease: No exploit is required

Vulnerability Publication Date: 7/5/2005

Reference Information

CVE: CVE-2005-2163

BID: 14154

CWE: 20, 442, 629, 711, 712, 722, 725, 74, 750, 751, 79, 800, 801, 809, 811, 864, 900, 928, 931, 990