WANem index-advanced.php XSS

medium Nessus Plugin ID 62736

Synopsis

The remote web server has a web application that is affected by a cross-site scripting vulnerability.

Description

The remote host hosts a version of WANem that is affected by a cross-site scripting vulnerability. The index-advanced.php script does not properly sanitize user-supplied input. Other scripts on the server may be affected by cross-site scripting attacks as well.

An attacker may be able to leverage this to inject arbitrary HTML and script code into a user's browser to be executed within the security context of the affected site.

Solution

There is no known solution. As a workaround, either disable or restrict access to the application.

See Also

http://www.nessus.org/u?60995f52

Plugin Details

Severity: Medium

ID: 62736

File Name: wanem_index_advanced_xss.nasl

Version: 1.8

Type: remote

Published: 10/29/2012

Updated: 1/19/2021

Supported Sensors: Nessus

Vulnerability Information

CPE: x-cpe:/a:tata:wanem

Required KB Items: www/wanem

Excluded KB Items: Settings/disable_cgi_scanning

Exploit Available: true

Exploit Ease: Exploits are available

Vulnerability Publication Date: 8/12/2012

Reference Information

BID: 56326

CWE: 20, 442, 629, 711, 712, 722, 725, 74, 750, 751, 79, 800, 801, 809, 811, 864, 900, 928, 931, 990