Detections
Analytics
Ultimate PHP Board 1.9.6 GOLD Multiple Scripts XSS (2)
medium Nessus Plugin ID 19498
Language:
Synopsis
A web application on the remote host has multiple cross-site scripting vulnerabilities.Description
The remote host is running Ultimate PHP Board (UPB). The remote version of this software is affected by several cross-site scripting vulnerabilities. These issues are due to a failure of the application to properly sanitize user-supplied input.Solution
Upgrade to UPB 2.2.6 or later.See Also
Plugin Details
Severity: Medium
ID: 19498
File Name: upb_xss.nasl
Version: 1.22
Type: remote
Family: CGI abuses : XSS
Published: 8/24/2005
Updated: 4/11/2022
Configuration: Enable paranoid mode, Enable thorough checks
Supported Sensors: Nessus
Risk Information
VPR
Risk Factor: Low
Score: 3.8
CVSS v2
Risk Factor: Medium
Base Score: 4.3
Temporal Score: 3.7
Vector: CVSS2#AV:N/AC:M/Au:N/C:N/I:P/A:N
Vulnerability Information
CPE: cpe:/a:ultimate_php_board:ultimate_php_board
Required KB Items: Settings/ParanoidReport, www/PHP
Excluded KB Items: Settings/disable_cgi_scanning
Exploit Ease: No exploit is required
Vulnerability Publication Date: 6/16/2005
Reference Information
CVE: CVE-2005-2004
BID: 13971