Detections
Analytics
ExBB Netsted BBcode XSS
low Nessus Plugin ID 16223
Language:
Synopsis
A web application running on the remote host has a cross-site scripting vulnerability.Description
The remote host is running ExBB, a bulletin board system written in PHP.According to its version number, this install of ExBB has a persistent cross-site scripting vulnerability. Posting a maliciously crafted forum comment could lead to arbitrary script code execution.
A remote attacker could exploit this to steal the authentication cookies of legitimate users.
Solution
There is no known solution at this time.See Also
Plugin Details
Severity: Low
ID: 16223
File Name: exbb_xss.nasl
Version: 1.19
Type: remote
Family: CGI abuses : XSS
Published: 1/20/2005
Updated: 1/19/2021
Supported Sensors: Nessus
Risk Information
CVSS v2
Risk Factor: Low
Base Score: 3.5
Temporal Score: 3.5
Vector: CVSS2#AV:N/AC:M/Au:S/C:N/I:P/A:N
Vulnerability Information
Required KB Items: www/PHP
Excluded KB Items: Settings/disable_cgi_scanning
Exploit Available: true
Exploit Ease: No exploit is required
Vulnerability Publication Date: 1/19/2005
Reference Information
BID: 12306