Vulnerability Assessment & Network Security Forums



If through a vulnerability assessment, a network security issue is detected for the vulnerability below, applying the appropriate security patches in a timely matter is very important.  If you have detected that your system has already been compromised, following CERT's Network Security recovery document will assist with recommended steps for system recovery.


Home >> Browse Vulnerability Assessment Database >> CGI abuses : XSS >> CPG Dragonfly Multiple Cross-Site Scripting Vulnerabilities


Vulnerability Assessment Details

CPG Dragonfly Multiple Cross-Site Scripting Vulnerabilities

Vulnerability Assessment Summary
Checks for multiple cross-site scripting vulnerabilities in CPG Dragonfly

Detailed Explanation for this Vulnerability Assessment

Summary :

The remote web server contains a PHP application that is affected by
multiple cross-site scripting issues.

Description :

The version of CPG Dragonfly / CPG-Nuke CMS installed on the remote
host suffers from multiple cross-site scripting vulnerabilities due to
its failure to sanitize user-input to several variables in various
modules. A possible hacker can exploit these flaws to steal cookie-based
authentication credentials and perform other such attacks.

See also :

http://securitytracker.com/alerts/2005/Mar/1013573.html
http://www.cpgnuke.com/Forums/viewtopic/t=8940.html

Solution :

Unknown at this time.

Network Security Threat Level:

Low / CVSS Base Score : 2
(AV:R/AC:H/Au:NR/C:N/A:N/I:P/B:N)

Networks Security ID: 12930

Vulnerability Assessment Copyright: This script is Copyright (C) 2005-2006 Tenable Network Security

Cables, Connectors


Dell PowerEdge R640 Server 2x Gold 6150 2.70Ghz 36-Core 256GB 2x 960GB SSD H730P picture

Dell PowerEdge R640 Server 2x Gold 6150 2.70Ghz 36-Core 256GB 2x 960GB SSD H730P

$1737.25



Dell PowerEdge R740xd Server 2x Gold 6140 2.30Ghz 36-Core 512GB H330 picture

Dell PowerEdge R740xd Server 2x Gold 6140 2.30Ghz 36-Core 512GB H330

$2194.80



Dell R740XD 24SFF 12 NVMe 2.4Ghz 48-C 256GB H730P 2x10G+2x1G NIC 2x1100W Rails picture

Dell R740XD 24SFF 12 NVMe 2.4Ghz 48-C 256GB H730P 2x10G+2x1G NIC 2x1100W Rails

$4332.07



Dell R740XD 24SFF 12 NVMe 2.1Ghz 32-C 256GB H730P 2x10G+2x1G NIC 2x1100W Rails picture

Dell R740XD 24SFF 12 NVMe 2.1Ghz 32-C 256GB H730P 2x10G+2x1G NIC 2x1100W Rails

$3932.07



INTEL XEON GOLD 6148 20 Core SR3B6 2.4GHZ 27.5MB Processor    @24 picture

INTEL XEON GOLD 6148 20 Core SR3B6 2.4GHZ 27.5MB Processor @24

$99.99



Intel Xeon Gold 6138 2.0GHz 27.5MB 20-Core 125W LGA3647 SR3B5 picture

Intel Xeon Gold 6138 2.0GHz 27.5MB 20-Core 125W LGA3647 SR3B5

$46.00



Intel Xeon Gold 6140 SR3AX 2.3GHz 18-Core Processor CPU picture

Intel Xeon Gold 6140 SR3AX 2.3GHz 18-Core Processor CPU

$39.99



Intel Xeon E5-2690V2 3.00GHz 10-Core (SR1A5) Processor CPU READ DESCRIPTION picture

Intel Xeon E5-2690V2 3.00GHz 10-Core (SR1A5) Processor CPU READ DESCRIPTION

$12.00



HP Workstation Z640 2x Xeon E5-2623V4 32GB Ram 512 SSD Quadro K420 Linux GA picture

HP Workstation Z640 2x Xeon E5-2623V4 32GB Ram 512 SSD Quadro K420 Linux GA

$243.59



Dell Precision 5810 Tower Intel Xeon E5-1603v3 2.8GHz 8GB RAM 500GB HDD W10P GPU picture

Dell Precision 5810 Tower Intel Xeon E5-1603v3 2.8GHz 8GB RAM 500GB HDD W10P GPU

$129.99



Discussions

No Discussions have been posted on this vulnerability.