Nessus Plugin #15937

Plugin Index

Note: This file has been created from a downloaded version of the Nessus Plugins from http://www.nessus.org/. Therefore, the information here can be outdated.

PunBB IMG Tag Client Side Scripting XSS

Family:

CGI abuses : XSS

Category:

infos

Copyright:

This script is Copyright (C) 2004 David Maciejak

Summary:

Checks for PunBB version

Version:

$Revision: 1.3 $

Cve_id:

-

Bugtraq_id:

-

Xrefs:

OSVDB:7977

Description:

The remote host seems to be running PunBB, an open source fast
and lightweight PHP powered discussion board.

This version is vulnerable to cross-site scripting flaws because
the application does not validate IMG tag.

With a specially crafted URL, an attacker can cause arbitrary
code execution resulting in a loss of integrity.

Solution : Update a least to version 1.0.1
See also: http://www.punbb.org/
Risk factor : Medium