Detections
Analytics

FuseTalk Forum img src Tag XSS

medium Nessus Plugin ID 15479

Language:

Synopsis

The remote web server is running a web application that is susceptible to cross-site scripting attacks.

Description

The remote host is using FuseTalk, a web-based discussion forum.

A vulnerability exists in the script 'tombstone.cfm' that could allow an attacker to execute arbitrary HTML and script code in the context of the user's browser.

Solution

There is no known solution at this time.

See Also

https://seclists.org/bugtraq/2004/Oct/106

Plugin Details

Severity: Medium

ID: 15479

File Name: fusetalk_forum_xss.nasl

Version: 1.25

Type: remote

Published: 10/17/2004

Updated: 1/19/2021

Supported Sensors: Nessus

Risk Information

VPR

Risk Factor: Low

Score: 3.8

CVSS v2

Risk Factor: Medium

Base Score: 4.3

Temporal Score: 4.3

Vector: CVSS2#AV:N/AC:M/Au:N/C:N/I:P/A:N

Vulnerability Information

Excluded KB Items: Settings/disable_cgi_scanning

Exploit Ease: No exploit is required

Vulnerability Publication Date: 10/13/2004

Reference Information

CVE: CVE-2004-1594

BID: 11407, 11393

CWE: 20, 442, 629, 711, 712, 722, 725, 74, 750, 751, 79, 800, 801, 809, 811, 864, 900, 928, 931, 990