Nessus Plugin #15556

Plugin Index

Note: This file has been created from a downloaded version of the Nessus Plugins from http://www.nessus.org/. Therefore, the information here can be outdated.

DevoyBB multiple flaws

Family:

CGI abuses : XSS

Category:

infos

Copyright:

This script is Copyright (C) 2004 David Maciejak

Summary:

Checks DevoyBB version

Version:

$Revision: 1.2 $

Cve_id:

-

Bugtraq_id:

11428

Xrefs:

-

Description:

The remote host is running DevoyBB, a web based forum written in PHP.

This version is vulnerable to XSS and SQL injection attacks. A malicious
user can access users cookies including authentication cookies and inject SQL
commands to be executed on the underlying database.

Solution: Upgraded to the latest version
Risk factor : High