Nessus Plugin #16093

Plugin Index

Note: This file has been created from a downloaded version of the Nessus Plugins from http://www.nessus.org/. Therefore, the information here can be outdated.

MySQL Eventum Multiple flaws

Family:

CGI abuses : XSS

Category:

infos

Copyright:

This script is Copyright (C) 2005 David Maciejak

Summary:

Test flaws in MySQL Eventum

Version:

$Revision: 1.2 $

Cve_id:

-

Bugtraq_id:

12133

Xrefs:

-

Description:

The remote host seems to be running MySQL Eventum, a user-friendly
and flexible issue tracking system written in PHP.

The remote version of this software is vulnerable to cross-site scripting
attacks, through multiple scripts.

With a specially crafted URL, an attacker can use the remote server to
perform an attack against third party users of the remote service, in order
to steal their credentials.

Solution: No update available yet
Risk factor : Medium