Detections
Analytics

RM SafetyNet Plus snpfiltered.pl u Parameter XSS

medium Nessus Plugin ID 18182

Language:

Synopsis

A web filtering application has a cross-site vulnerability.

Description

The remote host is running SafetyNet Plus, an educational web filtering application.

This version is vulnerable to a cross-site scripting attack. Input to the 'u' parameter of snpfiltered.pl is not properly sanitized. A remote attacker could exploit this by tricking a user into requesting a maliciously crafted URL.

Solution

Upgrade to the latest version of this application.

Plugin Details

Severity: Medium

ID: 18182

File Name: RM_safetynet_xss.nasl

Version: 1.16

Type: remote

Published: 5/2/2005

Updated: 1/19/2021

Supported Sensors: Nessus

Vulnerability Information

Excluded KB Items: Settings/disable_cgi_scanning

Vulnerability Publication Date: 4/12/2005

Reference Information

CWE: 20, 442, 629, 711, 712, 722, 725, 74, 750, 751, 79, 800, 801, 809, 811, 864, 900, 928, 931, 990