Nessus Plugin #17972

Plugin Index

Note: This file has been created from a downloaded version of the Nessus Plugins from http://www.nessus.org/. Therefore, the information here can be outdated.

SonicWall SOHO Web Interface XSS

Family:

CGI abuses

Category:

infos

Copyright:

This script is Copyright (C) 2005 David Maciejak

Summary:

Checks SonicWall SOHO Web Interface XSS

Version:

$Revision: 1.2 $

Cve_id:

-

Bugtraq_id:

12984

Xrefs:

-

Description:

The remote host is a SonicWall SOHO appliance.

This version is vulnerable to multiple flaws, and in particular to a
cross-site scripting due to a lack of sanitization of user-supplied data.
Successful exploitation of this issue may allow an attacker to execute
malicious script code on a vulnerable appliance.

Solution: Upgrade to the latest version
See also: http://www.sonicwall.com/
Risk factor : Medium