Nessus Plugin #15940

Plugin Index

Note: This file has been created from a downloaded version of the Nessus Plugins from http://www.nessus.org/. Therefore, the information here can be outdated.

PunBB profile.php XSS

Family:

CGI abuses : XSS

Category:

infos

Copyright:

This script is Copyright (C) 2004 David Maciejak

Summary:

Checks for PunBB profile.php XSS

Version:

$Revision: 1.3 $

Cve_id:

-

Bugtraq_id:

11847

Xrefs:

OSVDB:7975

Description:

The remote host seems to be running PunBB, an open source fast
and lightweight PHP powered discussion board.

This version is vulnerable to cross-site scripting flaws
threw 'profile.php' script.

With a specially crafted URL, an attacker can cause arbitrary
code execution resulting in a loss of integrity.

Solution : Update a least to version 1.1.4

See also: http://www.punbb.org/

Risk factor : Medium