Nessus Plugin #15785

Plugin Index

Note: This file has been created from a downloaded version of the Nessus Plugins from http://www.nessus.org/. Therefore, the information here can be outdated.

Aztek Forum XSS

Family:

CGI abuses : XSS

Category:

infos

Copyright:

This script is Copyright (C) 2004 David Maciejak

Summary:

Checks XSS in Aztek Forum

Version:

$Revision: 1.2 $

Cve_id:

-

Bugtraq_id:

11654

Xrefs:

OSVDB:11704

Description:

The remote host is using Aztek Forum, a web forum written in PHP.

A vulnerability exists the remote version of this software - more
specifically in the script 'forum_2.php', which may allow an attacker to
set up a cross site scripting attack using the remote host.

Solution : Upgrade to the latest version of this software
Risk factor : Medium