Nessus Plugin #16059

Plugin Index

Note: This file has been created from a downloaded version of the Nessus Plugins from http://www.nessus.org/. Therefore, the information here can be outdated.

ZeroBoard flaws

Family:

CGI abuses : XSS

Category:

infos

Copyright:

This script is Copyright (C) 2004 David Maciejak

Summary:

Checks ZeroBoard flaws

Version:

$Revision: 1.2 $

Cve_id:

-

Bugtraq_id:

12103

Xrefs:

-

Description:

The remote host runs ZeroBoard, a web BBS application.

The remote version of this software is vulnerable to cross-site scripting
and remote script injection due to a lack of sanitization of user-supplied
data.

Successful exploitation of this issue may allow an attacker to execute
arbitrary code on the remote host or to use it to perform an attack against
third-party users.

Solution: Upgrade to the latest version of this software
Risk factor : High