Cross-site scripting vulnerability in fom.cgi of Faq-O-Matic 2.712 allows remote attackers to execute arbitrary Javascript on other clients via the cmd parameter, which causes the script to be inserted into an error message.

The remote host runs Faq-O-Matic, a CGI-based system that automates the process of maintaining a FAQ.

The remote version of this software is vulnerable to cross-site scripting attacks in the script 'fom.cgi'.

With a specially crafted URL, an attacker can cause arbitrary code execution resulting in a loss of integrity.

Due to unescaped HTML code Faq-O-Matic returned unverified scripting code to the browser. With some tweaking this enables an attacker to steal cookies from one of the Faq-O-Matic moderators or the admin.

Cross-Site Scripting is a type of problem that allows a malicious person to make another person run some JavaScript in their browser.
The JavaScript is executed on the victims machine and is in the context of the website running the Faq-O-Matic Frequently Asked Question manager.

The fom.cgi script exists on this web server. Some versions of this file are vulnerable to a remote exploit.

It is possible that the remote web server contains one or more dangerous CGI scripts. 

Note that this plugin does not actually test for the underlying flaws but instead only searches for scripts with the same name as those with known vulnerabilities.

ID	Name	Product	Family	Severity
15540	Faq-O-Matic fom.cgi Multiple Parameter XSS	Nessus	CGI abuses : XSS	medium
14946	Debian DSA-109-1 : faqomatic - XSS vulnerability	Nessus	Debian Local Security Checks	medium
1663	fom.cgi Multiple Vulnerabilities	Nessus Network Monitor	Web Servers	high
11748	Multiple Dangerous CGI Script Detection	Nessus	CGI abuses	high

Detections

Analytics

CVE-2002-0230

medium

Tenable Plugins

medium

medium

high

high