Nessus Plugin #14793

Plugin Index

Note: This file has been created from a downloaded version of the Nessus Plugins from http://www.nessus.org/. Therefore, the information here can be outdated.

Tutos input validation Issues

Family:

CGI abuses : XSS

Category:

infos

Copyright:

This script is Copyright (C) 2004 David Maciejak

Summary:

Checks the version of Tutos

Version:

$Revision: 1.2 $

Cve_id:

-

Bugtraq_id:

10129

Xrefs:

OSVDB:5326

Description:

The remote host is running Tutos, an open-source team organization software
package written in PHP.

The remote version of this software is vulnerable to multiple input validation
flaws which may allow an authenticated user to perform a cross site scripting
attack, path disclosure attack or a SQL injection against the remote service.

Solution : Upgrade to Tutos-1.1.20040412 or newer
Risk factor : High