Detections
Analytics
Netquery <= 3.1 Multiple Vulnerabilities
medium Nessus Plugin ID 19301
Language:
Synopsis
The remote web server contains a PHP application that is vulnerable to multiple issues.Description
The remote host is running Netquery, a suite of network information utilities written in PHP.The version of Netquery on the remote host suffers from multiple flaws :
- Remote Code Execution An attacker can execute arbitrary commands through the Ping panel of the 'nquser.php' script provided it's enabled.
- Information Disclosure An attacker can retrieve the log of Netquery activity with a simple GET request.
- Multiple Cross-Site Scripting Flaws The application fails to sanitize user-supplied input to several scripts before using it in dynamically- generated pages, which allows for cross-site scripting attacks.
Solution
Apply the patch or upgrade to Netquery 3.11 or later.See Also
https://packetstormsecurity.com/0507-exploits/netquery31.txt
Plugin Details
Severity: Medium
ID: 19301
File Name: netquery_31_mult_vulns.nasl
Version: 1.25
Type: remote
Family: CGI abuses
Published: 7/26/2005
Updated: 4/11/2022
Configuration: Enable thorough checks
Supported Sensors: Nessus
Vulnerability Information
CPE: cpe:/a:virtech:netquery
Required KB Items: www/PHP
Excluded KB Items: Settings/disable_cgi_scanning
Exploit Available: true
Exploit Ease: No exploit is required
Exploited by Nessus: true
Vulnerability Publication Date: 7/25/2005
Reference Information
BID: 14373