Detections
Analytics
Lyris ListManager Multiple XSS
medium Nessus Plugin ID 41625
Language:
Synopsis
The remote web server is hosting an application that is affected by multiple cross-site scripting vulnerabilities.Description
The remote host is running ListManager, a web-based commercial mailing list management application from Lyris.The installed version fails to properly sanitize user-supplied input to multiple parameters / scripts before using it to generate dynamic HTML output, such as :
- /scripts/message/message.tml: 'how_many_back', 'msgdig_targeturl'
- /read/attach_file.tml: 'page'
- /read/attachment_too_large.tml: 'page'
- /read/confirm_file_attach.tml: 'page'
- /read/login/index.tml: 'emailaddr'
- /read/login/sent_password.tml: 'emailaddr'
An attacker may be able to leverage these issues to launch cross-site scripting attacks against users of the application.
Note that the installed version is likely to be affected by other vulnerabilities, though Nessus has not tested for these.
Solution
Unknown at this time.See Also
Plugin Details
Severity: Medium
ID: 41625
File Name: listmanager_multiple_xss.nasl
Version: 1.20
Type: remote
Family: CGI abuses : XSS
Published: 9/25/2009
Updated: 4/11/2022
Configuration: Enable thorough checks
Supported Sensors: Nessus
Vulnerability Information
CPE: cpe:/a:lyris:list_manager
Excluded KB Items: Settings/disable_cgi_scanning
Exploit Available: true
Exploit Ease: Exploits are available
Exploited by Nessus: true
Vulnerability Publication Date: 9/23/2009
Reference Information
BID: 36509