Detections
Analytics
XOOPS Glossary Module glossaire-aff.php lettre Parameter XSS
medium Nessus Plugin ID 11508
Language:
Synopsis
The remote web server contains a PHP script that is prone to cross- site scripting attacks.Description
There is a cross-site scripting issue in the version of XOOPS installed on the remote host that may allow an attacker to steal your user cookies. The flaw lies in 'glossaire-aff.php'.Solution
Unknown at this time.See Also
Plugin Details
Severity: Medium
ID: 11508
File Name: xoops_xss.nasl
Version: 1.26
Type: remote
Family: CGI abuses : XSS
Published: 4/3/2003
Updated: 1/19/2021
Supported Sensors: Nessus
Risk Information
CVSS v2
Risk Factor: Medium
Base Score: 4.3
Temporal Score: 4.3
Vector: CVSS2#AV:N/AC:M/Au:N/C:N/I:P/A:N
Vulnerability Information
Required KB Items: www/xoops
Exploit Available: true
Exploit Ease: No exploit is required
Reference Information
BID: 7356