Detections
Analytics
DCP-Portal < 6.1 Multiple Vulnerabilities
low Nessus Network Monitor Plugin ID 2355
Synopsis
The remote host is running a version of DCP-Portal that is reported prone to three distinct vulnerabilities.Description
The remote host is running a version of DCP-Portal that is reported prone to three distinct vulnerabilities. DCP-Portal is software that handles content management submitted by various clients or users. This version is vulnerable to Cross-Site Scripting (XSS), HTML injection, and HTML-splitting attacks. An attacker exploiting these flaws would be able to modify HTTP data and/or create malicious links or code for other visiting users to execute.Solution
Upgrade to version 6.1 or higher.Plugin Details
Severity: Low
ID: 2355
Family: Web Servers
Published: 10/6/2004
Updated: 3/6/2019
Risk Information
VPR
Risk Factor: Low
Score: 3.8
CVSS v2
Risk Factor: Medium
Base Score: 4.3
Temporal Score: 4.3
Vector: CVSS2#AV:N/AC:M/Au:N/C:N/I:P/A:N
CVSS v3
Risk Factor: Low
Base Score: 3.7
Temporal Score: 3.7
Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
Temporal Vector: CVSS:3.0/E:H/RL:U/RC:X
Vulnerability Information
CPE: cpe:/a:codeworx_technologies:dcp-portal
Reference Information
CVE: CVE-2004-2511, CVE-2004-2512