Detections
Analytics
PHPSysInfo < 2.5 Multiple Script XSS
medium Nessus Plugin ID 17610
Language:
Synopsis
The remote web server contains two PHP scripts that are prone to cross-site scripting attacks.Description
The remote host is running phpSysInfo, a PHP script that parses the /proc entries on Linux systems and displays them in HTML.The version of phpSysInfo installed on the remote host is affected by multiple cross-site scripting vulnerabilities due to its failure to sanitize user input to the 'sensor_program' parameter of 'index.php' and the 'text[language]', 'text[template]', and 'VERSION' parameters of 'system_footer.php'. If PHP's 'register_globals' setting is enabled, a remote attacker can exploit these flaws to have arbitrary script rendered in the browser of a user in the context of the affected website.
Solution
Upgrade to phpSysInfo 2.5 or later.See Also
Plugin Details
Severity: Medium
ID: 17610
File Name: phpsysinfo_multiple_xss.nasl
Version: 1.21
Type: remote
Family: CGI abuses : XSS
Published: 3/24/2005
Updated: 4/11/2022
Configuration: Enable thorough checks
Supported Sensors: Nessus
Risk Information
VPR
Risk Factor: Low
Score: 3.8
CVSS v2
Risk Factor: Medium
Base Score: 4.3
Temporal Score: 3.7
Vector: CVSS2#AV:N/AC:M/Au:N/C:N/I:P/A:N
Vulnerability Information
CPE: cpe:/a:phpsysinfo:phpsysinfo
Required KB Items: www/PHP
Excluded KB Items: Settings/disable_cgi_scanning
Exploit Ease: No exploit is required
Vulnerability Publication Date: 3/23/2005
Reference Information
CVE: CVE-2005-0870
BID: 12887