The mod_plsql module supplied with Oracle9iAS allows cross-site scripting attacks to be performed.

The remote host contains an ASP.NET installation that is affected by a cross-site scripting vulnerability. An attacker can exploit this issue to execute arbitrary HTML or script code in a user's browser within the security context of the affected site.

Two sample CGI's supplied with FastCGI are vulnerable to cross-site scripting attacks. FastCGI is an 'open extension to CGI that provides high performance without the limitations of server specific APIs', and is included in the default installation of the 'Unbreakable' Oracle9i Application Server. Various other web servers support the FastCGI extensions (Zeus, Pi3Web etc).

Two sample CGI's are installed with FastCGI, (echo.exe and echo2.exe under Windows, echo and echo2 under Unix). Both of these CGI's output a list of environment variables and PATH information for various applications. They also display any parameters that were provided to them.

Agora is a CGI-based, e-commerce package. Due to poor input validation, Agora allows an attacker to execute cross-site scripting attacks.

Webalizer, a web server log analysis application, was detected on the remote host.  This version of Webalizer has multiple cross-site scripting vulnerabilities that could allow malicious HTML tags to be injected in the reports.

The remote host is running a web server that fails to adequately sanitize request strings of malicious JavaScript. A remote attacker can exploit this issue, via a specially crafted request, to execute arbitrary HTML and script code in a user's browser within the security context of the affected site.

ID	Name	Severity
10853	Oracle 9iAS mod_plsql Multiple Procedures XSS	medium
10844	Microsoft IIS ASP Redirection Function XSS	medium
10838	FastCGI Multiple Sample CGI XSS	medium
10836	AgoraCart agora.cgi cart_id Parameter XSS	medium
10816	Webalizer < 2.01-09 Multiple XSS	medium
10815	Web Server Generic XSS	medium

Detections

Analytics

CGI abuses : XSS Family for Nessus

medium

medium

medium

medium

medium

medium