Detections
Analytics
ASPrunner 2.4 Multiple Vulnerabilities
high Nessus Plugin ID 14233
Language:
Synopsis
The remote web server contains an ASP script which is vulnerable to a cross-site scripting issue.Description
The remote host is running ASPrunner prior to version 2.5. There are multiple flaws in this version of ASPrunner which would enable a remote attacker to read and/or modify potentially confidential data.An attacker, exploiting this flaw, would need access to the web server via the network.
Solution
Unknown at this time.See Also
Plugin Details
Severity: High
ID: 14233
File Name: asprunner_mult.nasl
Version: 1.34
Type: remote
Family: CGI abuses
Published: 8/9/2004
Updated: 1/19/2021
Configuration: Enable paranoid mode
Supported Sensors: Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 6.3
CVSS v2
Risk Factor: High
Base Score: 7.5
Temporal Score: 7.5
Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P
Vulnerability Information
Required KB Items: Settings/ParanoidReport
Exploit Available: true
Exploit Ease: No exploit is required
Vulnerability Publication Date: 7/26/2004
Reference Information
CVE: CVE-2004-2057, CVE-2004-2058, CVE-2004-2059, CVE-2004-2060
BID: 10799