PHP Code Snippet Library index.php Multiple Parameter XSS

NASLDB: PHP Code Snippet Library index.php Multiple Parameter XSS

General

ID: 14368
Name: PHP Code Snippet Library index.php Multiple Parameter XSS

Summary: Checks for the presence of an XSS bug in PHP-CSL

Credits: Tenable Network Security, Inc.

Classification

Risk: –

CVSS: –
CVSS Base Vector: CVSS2#AV:N/AC:M/Au:N/C:N/I:P/A:N
CVSS Temporal Vector: CVSS2#E:H/RL:U/RC:ND

Port: 80
Family: CGI abuses : XSS
Type: Remote

Description

The remote host is running PHP Code Snippet Library (PHP-CSL), a
library written in PHP.

The remote version of this software fails to sanitize input to the
‘cat_select’ parameter of the ‘index.php’ script. This can be used to
take advantage of the trust between a client and server allowing the
malicious user to execute malicious JavaScript on the client’s
machine.