Detections
Analytics
OSSIM Framework session/login.php dest Parameter XSS
medium Nessus Plugin ID 31133
Language:
Synopsis
The remote web server contains a PHP application that is affected by a cross-site scripting vulnerability.Description
The remote host is running OSSIM (Open Source Security Information Management), a suite of security tools managed by a web-based front-end.The version of OSSIM installed on the remote host fails to sanitize user input to the 'dest' parameter of the 'session/login.php' script before using it to generate dynamic HTML output. An unauthenticated attacker can exploit this to inject arbitrary HTML and script code into a user's browser to be executed within the security context of the affected site.
Note that there is also reportedly a SQL injection vulnerability associated with this version of OSSIM, although Nessus has not checked for it.
Solution
Upgrade to OSSIM 0.9.9p1 / Installer 1.0.4 or later.See Also
https://www.securityfocus.com/archive/1/488450/30/0/threaded
Plugin Details
Severity: Medium
ID: 31133
File Name: ossim_dest_xss.nasl
Version: 1.22
Type: remote
Family: CGI abuses : XSS
Published: 2/22/2008
Updated: 4/11/2022
Configuration: Enable thorough checks
Supported Sensors: Nessus
Risk Information
VPR
Risk Factor: Low
Score: 3.8
CVSS v2
Risk Factor: Medium
Base Score: 4.3
Temporal Score: 3.7
Vector: CVSS2#AV:N/AC:M/Au:N/C:N/I:P/A:N
Vulnerability Information
Required KB Items: www/PHP
Excluded KB Items: Settings/disable_cgi_scanning
Exploit Ease: No exploit is required
Reference Information
CVE: CVE-2008-0919
BID: 27929