exploits , vulnerabilities , articles , PHPSysInfo Multiple Cross-Site Scripting Vulnerabilities

Title	PHPSysInfo Multiple Cross-Site Scripting Vulnerabilities
Published	2005-03-23-12:00AM
Updated	2005-11-16-10:04PM
Class	Input Validation Error
CVE	CAN-2005-0870
Remote	Yes
Local	No
Credit	Discovery of this vulnerability is credited to Maksymilian Arciemowicz <max@jestsuper.pl>.
Vulnerable	phpSysInfo phpSysInfo 2.3 phpSysInfo phpSysInfo 2.0 Debian Linux 3.0 Debian Linux 3.0 alpha Debian Linux 3.0 arm Debian Linux 3.0 hppa Debian Linux 3.0 ia32 Debian Linux 3.0 ia64 Debian Linux 3.0 m68k Debian Linux 3.0 mips Debian Linux 3.0 mipsel Debian Linux 3.0 ppc Debian Linux 3.0 s/390 Debian Linux 3.0 sparc MandrakeSoft Corporate Server 3.0 x86_64 MandrakeSoft Corporate Server 3.0 Debian Linux 3.1 sparc Debian Linux 3.1 s/390 Debian Linux 3.1 ppc Debian Linux 3.1 mipsel Debian Linux 3.1 mips Debian Linux 3.1 m68k Debian Linux 3.1 ia64 Debian Linux 3.1 ia32 Debian Linux 3.1 hppa Debian Linux 3.1 arm Debian Linux 3.1 amd64 Debian Linux 3.1 alpha Debian Linux 3.1 Debian Linux 3.0 sparc Debian Linux 3.0 s/390 Debian Linux 3.0 ppc Debian Linux 3.0 mipsel Debian Linux 3.0 mips Debian Linux 3.0 m68k Debian Linux 3.0 ia64 Debian Linux 3.0 ia32 Debian Linux 3.0 hppa Debian Linux 3.0 arm Debian Linux 3.0 alpha Debian Linux 3.0
Not Vulnerable
Code	No exploit is required. The following proof of concepts URIs are available: http://www.example.com/[phpSysInfo]/index.php?sensor_program=[XSS] http://www.example.com/[phpSysInfo]/includes/system_footer.php?text[language]=">[XSS] http://www.example.com/[phpSysInfo]/includes/system_footer.php?text[template]=">[XSS] http://www.example.com/[phpSysInfo]/includes/system_footer.php?hide_picklist=cXIb8O3&VERSION=[XSS]
TXT

Vulnerabilities - newest 10 RSS | More

2008-12-03 Adobe Acrobat 9 Unspecified PDF Document Encryption Weakness
2008-12-03 Ocean12 Mailing List Manager Gold SQL Injection and Cross Site Scripting Vulnerabilities
2008-12-03 IBM Rational ClearQuest Maintenance Tool Local Information Disclosure Vulnerability
2008-12-03 VMware Products Unspecified Host Memory Corruption Vulnerability
2008-12-03 IBM Rational ClearQuest Web Multiple Unspecified Cross Site Scripting Vulnerabilities
2008-12-02 RakhiSoftware Shopping Cart Multiple Remote Vulnerabilities
2008-12-02 Softbiz Classifieds Script Multiple Cross Site Scripting Vulnerabilities
2008-12-02 CodeToad ASP Shopping Cart Script Cross Site Scripting Vulnerability
2008-12-02 xrdp Multiple Buffer Overflow Vulnerabilities
2008-12-02 FFmpeg Multiple Denial of Service Vulnerabilities