Detections
Analytics
CoolPHP 1.0 Multiple Vulnerabilities
medium Nessus Plugin ID 15506
Language:
Synopsis
The remote web server is running an application that is vulnerable to multiple flaws.Description
The remote host is running the CoolPHP Content Management system.There are various flaws in the remote version of this software which may allow an attacker to read arbitrary files on the remote host or to set up a cross-site scripting attack.
Solution
None at this time.Plugin Details
Severity: Medium
ID: 15506
File Name: coolphp_xss.nasl
Version: 1.23
Type: remote
Family: CGI abuses
Published: 10/18/2004
Updated: 1/19/2021
Configuration: Enable paranoid mode
Supported Sensors: Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 6.0
CVSS v2
Risk Factor: Medium
Base Score: 5
Temporal Score: 3.9
Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:N/A:N
Vulnerability Information
Required KB Items: Settings/ParanoidReport, www/PHP
Excluded KB Items: Settings/disable_cgi_scanning
Exploit Ease: No exploit is required
Vulnerability Publication Date: 10/16/2004
Reference Information
CVE: CVE-2004-1599, CVE-2004-1601
BID: 11437