Detections
Analytics
Siteman forum.php page Parameter XSS
medium Nessus Plugin ID 16171
Language:
Synopsis
The remote web server contains a PHP application that is affected by a cross-site scripting attack.Description
The remote host is running Siteman, a web-based content management system written in PHP.The remote version of this software is vulnerable to a cross-site scripting attack due to a lack of sanitization of user-supplied data to the 'page' parameter of the 'forum.php' script. Successful exploitation of this issue may allow an attacker to use the remote server to perform an attack against a third-party user.
Solution
Unknown at this time.See Also
Plugin Details
Severity: Medium
ID: 16171
File Name: siteman_xss.nasl
Version: 1.23
Type: remote
Family: CGI abuses : XSS
Published: 1/14/2005
Updated: 4/11/2022
Configuration: Enable thorough checks
Supported Sensors: Nessus
Vulnerability Information
CPE: cpe:/a:siteman:siteman
Required KB Items: www/PHP
Excluded KB Items: Settings/disable_cgi_scanning
Exploit Available: true
Exploit Ease: No exploit is required
Vulnerability Publication Date: 1/14/2005
Reference Information
BID: 12267