Detections
Analytics

Greymatter Comment Name Field Control Panel Log XSS

medium Nessus Plugin ID 19752

Language:

Synopsis

A remote web application is vulnerable to Cross-Site Scripting.

Description

The remote host is using Greymatter, an open source weblogging and journal software written in perl.

A vulnerability exists in this version that could allow an attacker to execute arbitrary HTML and script code in the context of the user's browser.

Solution

Upgrade to the latest version of this software

Plugin Details

Severity: Medium

ID: 19752

File Name: greymatter_html_inject.nasl

Version: 1.19

Type: remote

Published: 9/19/2005

Updated: 4/11/2022

Configuration: Enable thorough checks

Supported Sensors: Nessus

Risk Information

VPR

Risk Factor: Low

Score: 2.7

CVSS v2

Risk Factor: Medium

Base Score: 4.3

Temporal Score: 3.7

Vector: CVSS2#AV:N/AC:M/Au:N/C:N/I:P/A:N

Vulnerability Information

Excluded KB Items: Settings/disable_cgi_scanning

Exploit Ease: No exploit is required

Vulnerability Publication Date: 8/31/2005

Reference Information

CVE: CVE-2005-2816

BID: 14703

CWE: 20, 442, 629, 711, 712, 722, 725, 74, 750, 751, 79, 800, 801, 809, 811, 864, 900, 928, 931, 990