Detections
Analytics
Greymatter 1.3 Multiple Vulnerabilities
medium Nessus Plugin ID 16120
Language:
Synopsis
The remote host is running a Perl application that is affected by an HTML injection vulnerability.Description
The remote host is running Greymatter, a web-based log and journal maintenance system implemented in Perl.The remote version of this software is vulnerable to an HTML injection attack due to a lack of filtering on user-supplied input in the file 'gm-comments.cgi'. An attacker may exploit this flaw to perform a cross-site scripting attack against the remote host.
This software may be affected by another HTML injection vulnerability in the file 'gm-cplog.cgi' and to a password disclosure vulnerability in the file 'gm-token.cgi'.
Solution
There is no known solution at this time.See Also
Plugin Details
Severity: Medium
ID: 16120
File Name: greymatter_html_injection.nasl
Version: 1.22
Type: remote
Family: CGI abuses
Published: 1/8/2005
Updated: 1/19/2021
Supported Sensors: Nessus
Vulnerability Information
CPE: cpe:/a:greymatter:greymatter
Required KB Items: www/PHP
Excluded KB Items: Settings/disable_cgi_scanning
Exploit Available: true
Exploit Ease: No exploit is required
Vulnerability Publication Date: 1/10/2005