Nessus Plugin #14727

Plugin Index

Note: This file has been created from a downloaded version of the Nessus Plugins from http://www.nessus.org/. Therefore, the information here can be outdated.

Post-Nuke News module XSS

Family:

CGI abuses : XSS

Category:

infos

Copyright:

This script is Copyright (C) 2004 David Maciejak

Summary:

Determines if post-nuke is vulnerable to XSS

Version:

$Revision: 1.5 $

Cve_id:

-

Bugtraq_id:

5809

Xrefs:

OSVDB:5499

Description:

The remote host is running a version of Post-Nuke which contains
the 'News' module which itself is vulnerable to a cross site
scripting issue.

An attacker may use these flaws to steal the cookies of the
legitimate users of this web site.

Solution : Upgrade to the latest version of postnuke
Risk factor : Medium