How to Buy
This script is Copyright (C) 2011-2014 Tenable Network Security, Inc.
The remote web server contains an application that is affected by a
cross-site scripting vulnerability.
The remote host is running a version of Sitecore CMS that is
reportedly affected by a cross-site scripting vulnerability. An
attacker could exploit this to inject arbitrary HTML or script code
into a user's browser to be executed within the security context of
the affected site.
See also :
Upgrade to Sitecore 6.0.2 rev.090507, also known as 6.0.2 Update-1, or newer.
Risk factor :
Medium / CVSS Base Score : 4.3
CVSS Temporal Score : 3.6
Public Exploit Available : true
Family: CGI abuses : XSS
Nessus Plugin ID: 55977 ()
Bugtraq ID: 44405
CVE ID: CVE-2009-2163
Nessus Professional: Scan unlimited IPs, run compliance checks & moreNessus Cloud: The power of Nessus for teams – from the cloud
The cookie settings on this website are set to 'allow all cookies' to give you the very best website experience. If you continue without changing these settings, you consent to this - but if you want, you can opt out of all cookies by clicking below.