The remote host seems to be vulnerable to a security problem in SquirrelMail. The 'read_body.php' script doesn't filter out user input for multiple parameters, allowing for XSS attacks.

The remote ClearTrust server is vulnerable to a cross-site scripting attack that can be exploited using specially crafted calls to its 'ct_logon.asp' or 'ct_logon.jsp' scripts.

The version of the FrontPage extensions running on the remote web server is affected by a cross-site scripting (XSS) vulnerability in shtml.dll due to improper validation of filenames. An unauthenticated, remote attacker can exploit this, by convincing a user to follow a specially crafted URL, to execute arbitrary script code in the user's browser session.

The version of IBM Domino (formerly IBM Lotus Domino) running on the remote host is affected by a cross-site scripting vulnerability due to a failure to properly sanitize user-supplied input when requesting a '.nsf' file. A remote, unauthenticated attacker can exploit this issue, via a crafted URL, to execute arbitrary code in a user's browser.

The remote Auction Deluxe server is vulnerable to a cross-site scripting attack. 

As a result, a user could easily steal the cookies of your legitimate users and impersonate them.

The remote Simple File Manager CGI (fm.php) improperly validates the names of the directories entered and created by the user.

As a result, a user could generate a cross-site scripting attack on this host.

This IIS Server appears to be vulnerable to a cross-site scripting attack due to an error in the handling of overly-long requests on an idc file.  It is possible to inject JavaScript in the URL, that will appear in the resulting page.

Apache Tomcat is the servlet container that is used in the official Reference Implementation for the Java Servlet and JavaServer Pages technologies. 

By making requests for DOS Device names it is possible to cause Tomcat to throw an exception, allowing cross-site scripting attacks.  The exception also reveals the physical path of the Tomcat installation.

Apache Tomcat is the servlet container that is used in the official Reference Implementation for the Java Servlet and JavaServer Pages technologies. 

By using the /servlet/ mapping to invoke various servlets / classes it is possible to cause Tomcat to throw an exception, allowing XSS attacks.

The remote web server seems to be vulnerable to cross-site scripting attacks because it fails to sanitize input supplied as a filename when displaying an error page. 

The vulnerability would allow an attacker to make the server present the user with the attacker's JavaScript/HTML code.  Since the content is presented by the server, the user will give it the trust level of the server (for example, the trust level of banks, shopping centers, etc would usually be high).

Older versions of JServ (including the version shipped with Oracle9i App Server v1.0.2) are vulnerable to a cross-site scripting attack using a request for a nonexistent .JSP file.

The script /iissamples/sdk/asp/interaction/Form_JScript.asp (of Form_VBScript.asp) allows you to insert information into a form field and once submitted re-displays the page, printing the text you entered. This .asp doesn't perform any input validation. An attacker can exploit this flaw to execute arbitrary script code in the browser of an unsuspecting victim.

The mod_plsql module supplied with Oracle9iAS allows cross-site scripting attacks to be performed.

The remote host contains an ASP.NET installation that is affected by a cross-site scripting vulnerability. An attacker can exploit this issue to execute arbitrary HTML or script code in a user's browser within the security context of the affected site.

Two sample CGI's supplied with FastCGI are vulnerable to cross-site scripting attacks. FastCGI is an 'open extension to CGI that provides high performance without the limitations of server specific APIs', and is included in the default installation of the 'Unbreakable' Oracle9i Application Server. Various other web servers support the FastCGI extensions (Zeus, Pi3Web etc).

Two sample CGI's are installed with FastCGI, (echo.exe and echo2.exe under Windows, echo and echo2 under Unix). Both of these CGI's output a list of environment variables and PATH information for various applications. They also display any parameters that were provided to them.

Agora is a CGI-based, e-commerce package. Due to poor input validation, Agora allows an attacker to execute cross-site scripting attacks.

Webalizer, a web server log analysis application, was detected on the remote host.  This version of Webalizer has multiple cross-site scripting vulnerabilities that could allow malicious HTML tags to be injected in the reports.

The remote host is running a web server that fails to adequately sanitize request strings of malicious JavaScript. A remote attacker can exploit this issue, via a specially crafted request, to execute arbitrary HTML and script code in a user's browser within the security context of the affected site.

ID	Name	Severity
11415	SquirrelMail 1.2.9 / 1.2.10 read_body.php Multiple Parameter XSS	medium
11399	RSA ClearTrust ct_logon.asp Multiple Parameter XSS	medium
11395	Microsoft IIS shtml.dll XSS	medium
11394	IBM Domino nsf File Argument XSS	medium
11365	Auction Deluxe auction.pl Multiple Parameter XSS	medium
11362	Simple File Manager Directory / Filename XSS	medium
11142	Microsoft IIS IDC Extension XSS	medium
11042	Apache Tomcat DOS Device Name XSS	medium
11041	Apache Tomcat /servlet Mapping XSS	medium
11010	IBM WebSphere Traversal Error Page XSS	medium
10957	Apache JServ Nonexistent JSP Request XSS	medium
10572	Microsoft IIS 5.0 Form_JScript.asp XSS	medium
10853	Oracle 9iAS mod_plsql Multiple Procedures XSS	medium
10844	Microsoft IIS ASP Redirection Function XSS	medium
10838	FastCGI Multiple Sample CGI XSS	medium
10836	AgoraCart agora.cgi cart_id Parameter XSS	medium
10816	Webalizer < 2.01-09 Multiple XSS	medium
10815	Web Server Generic XSS	medium

Detections

Analytics

CGI abuses : XSS Family for Nessus

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium