The remote host is running a web server that fails to adequately sanitize request strings of malicious JavaScript. A remote attacker can exploit this issue, via a specially crafted request, to execute arbitrary HTML and script code in a user's browser within the security context of the affected site.

远程主机运行的 Web 服务器无法对恶意 JavaScript 的请求字符串进行足够的审查。远程攻击者可利用此问题，通过特制的请求在受影响网站的安全环境中执行用户浏览器中的任意 HTML 和脚本代码。

リモートホストで実行されている Web サーバーは、悪意のある JavaScript のリクエスト文字列を適切にサニタイズできません。リモートの攻撃者がこの問題を悪用して、特別に細工されたリクエストを介し、影響を受けるサイトのセキュリティコンテキスト内で、ユーザーのブラウザで任意の HTML およびスクリプトコードを実行する可能性があります。

遠端主機正在執行無法適當處理惡意 JavaScript 要求字串的 Web 伺服器。遠端攻擊者可利用此問題，透過特製的要求在使用者瀏覽器 (在受影響網站的安全性內容) 中執行任意 HTML 和指令碼程式碼。

The remote Cherokee web server is vulnerable to a flaw in the way that it parses user requests.  Specifically, an attacker can create queries such that unsanitized script code is displayed in user browsers.  An attacker exploiting this flaw would need to be able to convince a user to browse to a malicious URI.  Successful exploitation would result in a possible loss of confidential materials.

The remote host is running NetworkActiv, a web server.  This version of NetworkActiv is vulnerable to a remote Cross-Site Scripting (XSS) attack.  An attacker exploiting this flaw would typically need to convince a user to browse to a malicious URI.  Success exploitation would result in the theft of confidential materials (such as authentication cookies).

ID	名稱	產品	系列	已發布	已更新	嚴重性
10815	Web Server Generic XSS	Nessus	CGI abuses : XSS	2001/11/30	2022/5/2	medium
10815	Web 服务器通用 XSS	Nessus	CGI abuses : XSS	2001/11/30	2022/5/2	medium
10815	Web サーバーの汎用 XSS	Nessus	CGI abuses : XSS	2001/11/30	2022/5/2	medium
10815	Web 伺服器泛型 XSS	Nessus	CGI abuses : XSS	2001/11/30	2022/5/2	medium
3508	Cherokee Web Server < 0.5.1 XSS	Nessus Network Monitor	Web Servers	2004/8/18	2019/3/6	low
3156	NetworkActiv < 3.5.14 Multiple Parameter XSS	Nessus Network Monitor	Web Servers	2005/8/8	2019/3/6	low

偵測

搜尋 Plugin

medium

medium

medium

medium

low

low