Detections
Analytics
TMaxSoft JEUS url.jsp URI XSS
medium Nessus Plugin ID 11764
Language:
Synopsis
A web application running on the remote host has a cross-site scripting vulnerability.Description
The remote host is running Tmax Soft JEUS, a web application written in Java.Input to the query string is not properly sanitized, which could lead to a cross-site scripting attack. A remote attacker could exploit this by tricking a user into requesting a maliciously crafted URL. This would allow the attacker to impersonate the targeted user.
Solution
Upgrade to the latest version of this software.See Also
Plugin Details
Severity: Medium
ID: 11764
File Name: jeus_url_xss.nasl
Version: 1.27
Type: remote
Family: CGI abuses : XSS
Published: 6/19/2003
Updated: 1/19/2021
Supported Sensors: Nessus
Vulnerability Information
Excluded KB Items: Settings/disable_cgi_scanning
Exploit Available: true
Exploit Ease: No exploit is required
Reference Information
BID: 7969