This script is Copyright (C) 2010-2014 Tenable Network Security, Inc.
The remote web server hosts a ColdFusion script that is prone to a
cross-site scripting attack.
The version of Mura CMS hosted on the remote web server fails to
sanitize user-supplied input to the 'link' parameter of the
before using it to generate dynamic HTML output.
An attacker may be able to leverage this issue to inject arbitrary
HTML or script code into a user's browser to be executed within the
security context of the affected site.
Note that the install is also likely to be affected by two other
cross-site scripting vulnerabilities, although Nessus has not checked
See also :
Either apply the appropriate security patch referenced in the vendor's
advisory or upgrade to version 5.1.967 or later.
Risk factor :
Medium / CVSS Base Score : 4.3
CVSS Temporal Score : 3.6
Public Exploit Available : true
Family: CGI abuses : XSS
Nessus Plugin ID: 49699 ()
Bugtraq ID: 42180