Detections
Analytics
Pligg register.php reg_username Parameter XSS
medium Nessus Plugin ID 51438
Language:
Synopsis
The remote web server hosts a web application that is vulnerable to a cross-site scripting attack.Description
The remote web server is hosting a version of Pligg that is affected by a cross-site scripting vulnerability in the 'reg_username' parameter of the 'register.php' script.Also note it has been reported that several other cross-site scripting vulnerabilities exist in the script 'register.php' via the parameters 'reg_email', 'reg_password', and 'reg_password2', although Nessus has not checked for them.
Solution
Upgrade to version 1.1.3 or greater.See Also
Plugin Details
Severity: Medium
ID: 51438
File Name: pligg_reg_username_xss.nasl
Version: 1.11
Type: remote
Family: CGI abuses : XSS
Published: 1/7/2011
Updated: 4/11/2022
Configuration: Enable thorough checks
Supported Sensors: Nessus
Vulnerability Information
CPE: cpe:/a:pligg:pligg_cms
Required KB Items: www/pligg
Excluded KB Items: Settings/disable_cgi_scanning
Exploited by Nessus: true
Patch Publication Date: 12/23/2010
Vulnerability Publication Date: 12/23/2010