Detections
Analytics
Basit CMS Multiple Script XSS
medium Nessus Plugin ID 11445
Language:
Synopsis
The remote web server contains a PHP script that is affected by several issues.Description
Basit cms 1.0 has a cross-site scripting bug. An attacker may use it to perform a cross-site scripting attack on this host.In addition to this, it is vulnerable to a SQL insertion attack that could allow an attacker to get the control of your database.
Solution
Unknown at this time.See Also
Plugin Details
Severity: Medium
ID: 11445
File Name: basit_xss.nasl
Version: 1.42
Type: remote
Family: CGI abuses : XSS
Published: 3/23/2003
Updated: 1/19/2021
Configuration: Enable paranoid mode
Supported Sensors: Nessus
Vulnerability Information
Required KB Items: www/PHP, Settings/ParanoidReport
Excluded KB Items: Settings/disable_cgi_scanning
Exploit Available: true
Exploit Ease: No exploit is required
Reference Information
BID: 7139