249 Post-Nuke 0.72 News Module sid cross site scripting CGI 2004/09/14 Marc Ruef marc dot ruef at computec dot ch http://www.computec.ch computec.ch Marc Ruef marc dot ruef at computec dot ch http://www.computec.ch computec.ch 2004/11/14 2.0 Corrected the plugin structure and added the accuracy values in 1.1. Improved the pattern matching and introduced the plugin changelog in 2.0 tcp 80 open|send GET /modules.php?op=modload&name=News&file=article&sid= HTTP/1.0\n\n|sleep|close|pattern_exists HTTP/#.# ### ** 99 This ATK plugin is inspired by the Nessus plugin. Mark Grimes mark at stateful dot net http://www.stateful.net Stateful Labs 2002/09/26 http://www.securityfocus.com/archive/1/293191 Post-Nuke 0.72 Post-Nuke newer than 0.72 or other solutions Cross Site Scripting The target system is running Post-Nuke. There is a cross site scripting vulnerability in the news module. An attacker may use this flaw to steal the cookies of the victim or may perform other attacks. You should install or upgrade the software to the latest version. Change the default directory of the affected suite to make it harder to run pre-defined and automated attacks against the vulnerability. Also limit unwanted connections and communications with firewalling if possible. Approx. 30 minutes Yes http://www.securityfocus.com/bid/5809/exploit/ Yes Yes Medium 6 8 7 6 Medium Nessus is able to do the same check, 5809 5499 14727 Hacking Exposed: Network Security Secrets & Solutions, Stuart McClure, Joel Scambray and George Kurtz, February 25, 2003, 4th Edition, McGraw-Hill Osborne Media, ISBN 0072227427 http://www.computec.ch