Vulnerability Assessment & Network Security Forums

If through a vulnerability assessment, a network security issue is detected for the vulnerability below, applying the appropriate security patches in a timely matter is very important. If you have detected that your system has already been compromised, following CERT's Network Security recovery document will assist with recommended steps for system recovery.

Home >> Browse Vulnerability Assessment Database >> CGI abuses : XSS >> RemotelyAnywhere Cross Site Scripting

Vulnerability Assessment Details

RemotelyAnywhere Cross Site Scripting

Vulnerability Assessment Summary
Detect RemotelyAnywhere www css

Detailed Explanation for this Vulnerability Assessment

Summary :

The remote RemotelyAnywhere web interface is vulnerable to a cross site
scripting issue.

Description :

A vulnerability in RemotelyAnywhere's web interface permits a remote
attacker to inject malicious text into the login screen, this can
be used by a possible hacker to make the user do things he would otherwise
not do (for example, change his password after a successful login to
some string provided by the malicious text).

Solution :

Upgrade to the newest version of this software

Network Security Threat Level:

Low / CVSS Base Score : 3
(AV:R/AC:H/Au:NR/C:P/A:N/I:N/B:C)

Networks Security ID: 9202

Vulnerability Assessment Copyright: This script is Copyright (C) 2003 Noam Rathaus

Cables, Connectors