Nessus Plugin #15566

Plugin Index

Note: This file has been created from a downloaded version of the Nessus Plugins from http://www.nessus.org/. Therefore, the information here can be outdated.

MoniWiki XSS

Family:

CGI abuses : XSS

Category:

infos

Copyright:

This script is Copyright (C) 2004 David Maciejak

Summary:

Test for XSS flaw in MoniWiki

Version:

$Revision: 1.3 $

Cve_id:

-

Bugtraq_id:

11516

Xrefs:

-

Description:

The remote host seems to be running MoniWiki, a wiki web application
written in PHP.

The remote version of this software is vulnerable to cross-site scripting
attacks, through the script 'wiki.php'.

With a specially crafted URL, an attacker can cause arbitrary code
execution in users' browsers resulting in a loss of integrity.

Solution: Upgrade to version 1.0.9 of this software
Risk factor : Medium