Detections
Analytics
Guppy Multiple HTTP Header XSS
high Nessus Plugin ID 19943
Language:
Synopsis
The remote web server contains a PHP script that allows for arbitrary code execution and cross-site scripting attacks.Description
The remote host is running Guppy, a CMS written in PHP.The remote version of this software does not properly sanitize input to the Referer and User-Agent HTTP headers before using it in the 'error.php' script. A malicious user can exploit this flaw to inject arbitrary script and HTML code into a user's browser or, if PHP's 'magic_quotes_gpc' seting is disabled, PHP code to be executed on the remote host subject to the privileges of the web server user id.
Solution
Upgrade to Guppy version 4.5.4 or later.See Also
Plugin Details
Severity: High
ID: 19943
File Name: guppy_request_header_flaws.nasl
Version: 1.21
Type: remote
Family: CGI abuses : XSS
Published: 10/6/2005
Updated: 1/19/2021
Supported Sensors: Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 5.9
CVSS v2
Risk Factor: Medium
Base Score: 6.8
Temporal Score: 5.9
Vector: CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:P
CVSS v3
Risk Factor: High
Base Score: 8.8
Temporal Score: 8.4
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Temporal Vector: CVSS:3.0/E:H/RL:O/RC:C
Vulnerability Information
Required KB Items: www/PHP
Excluded KB Items: Settings/disable_cgi_scanning
Exploit Ease: No exploit is required
Vulnerability Publication Date: 9/6/2005
Reference Information
CVE: CVE-2005-2853
BID: 14753