Nessus Plugin #15451

Plugin Index

Note: This file has been created from a downloaded version of the Nessus Plugins from http://www.nessus.org/. Therefore, the information here can be outdated.

GoSmart message board multiple flaws

Family:

CGI abuses : XSS

Category:

infos

Copyright:

This script is Copyright (C) 2004 David Maciejak

Summary:

Checks GoSmart message board flaws

Version:

$Revision: 1.2 $

Cve_id:

-

Bugtraq_id:

11361

Xrefs:

-

Description:

The remote host is running GoSmart message board, a bulletin board
manager written in ASP.


The remote version of this software contains multiple flaws, due o
to a failure of the application to properly sanitize user-supplied input.

It is also affected by a cross-site scripting vulnerability.
As a result of this vulnerability, it is possible for a remote attacker
to create a malicious link containing script code that will be executed
in the browser of an unsuspecting user when followed.

Furthermore, this version is vulnerable to SQL injection flaws that
let an attacker inject arbitrary SQL commands.

Solution : Upgrade to the newest version of this software
Risk factor : Medium