Nessus Plugin #14822

Plugin Index

Note: This file has been created from a downloaded version of the Nessus Plugins from http://www.nessus.org/. Therefore, the information here can be outdated.

OpenBB XSS

Family:

CGI abuses : XSS

Category:

infos

Copyright:

This script is Copyright (C) 2004 David Maciejak

Summary:

Tests for XSS flaw in openBB board.php

Version:

$Revision: 1.3 $

Cve_id:

-

Bugtraq_id:

9303

Xrefs:

OSVDB:3220

Description:

The remote host seems to be running OpenBB, a forum management system written
in PHP.

The remote version of this software is vulnerable to cross-site scripting
attacks, through the script 'board.php'.

Using a specially crafted URL, an attacker can cause arbitrary code execution
for third party users, thus resulting in a loss of integrity of their system.

Solution: Upgraded to the latest version of this software
Risk factor : Medium