LogAnalyzer index.php 'filter' Parameter XSS

medium Nessus Plugin ID 62123

Synopsis

The remote web server hosts a PHP script that is affected by a cross-site scripting vulnerability.

Description

The LogAnalyzer install hosted on the remote web server is affected by a cross-site scripting vulnerability due to a failure to properly sanitize user input to the 'filter' parameter of the 'index.php' script. An attacker can exploit this issue to inject arbitrary HTML and script code into a user's browser to be executed within the security context of the affected site.

The application is reportedly also affected by a SQL injection vulnerability, an arbitrary file read vulnerability, and additional cross-site scripting vulnerabilities; however, Nessus has not tested for these additional vulnerabilities.

Solution

Upgrade to version 3.4.3 / 3.5.4 or later.

See Also

http://www.nessus.org/u?9f9d105f

http://www.nessus.org/u?b746bafc

http://www.nessus.org/u?7a8eb7b3

Plugin Details

Severity: Medium

ID: 62123

File Name: loganalyzer_filter_parameter_xss.nasl

Version: 1.10

Type: remote

Published: 9/17/2012

Updated: 6/5/2024

Configuration: Enable thorough checks

Supported Sensors: Nessus

Enable CGI Scanning: true

Vulnerability Information

CPE: cpe:/a:adiscon:loganalyzer

Required KB Items: installed_sw/Adiscon LogAnalyzer

Excluded KB Items: Settings/disable_cgi_scanning

Exploit Available: true

Exploit Ease: Exploits are available

Patch Publication Date: 5/23/2012

Vulnerability Publication Date: 5/23/2012

Reference Information

BID: 53664

CWE: 20, 442, 629, 711, 712, 722, 725, 74, 750, 751, 79, 800, 801, 809, 811, 864, 900, 928, 931, 990