Acunetix Web Vulnerability Scanner Introduces New Security Check for PHP-CGI Installations

We are pleased to announce an updated build of Acunetix Web Vulnerability Scanner 8 (WVS 8). Build number 20120508 includes a number of new scheduler features, a new security check for PHP-CGI, as well as a series of bug fixes.

New Security Check

• Acunetix WVS 8 checks if your PHP-CGI installation is vulnerable to remote code execution. For further information regarding this type of vulnerability, read the PHP-CGI advisory article here.

New Features

• Ability to edit scheduled scans. No need for scheduling new scans every time you wish to change a scan setting.
• Amend multiple scheduled scans simultaneously by selecting them and applying the required global changes.
• Save all your scanned results and access them at any time from your scheduler’s scan history. You can also delete your scanned results from the web-based scheduler.
• A new setting has been introduced to configure the maximum number of pages during a crawl.

Improvements

• Improved Cross-Site Scripting (XSS) tests.
• The web-based scheduler has been improved to run better in the latest version of Internet Explorer.
• Enhanced SQL injection tests to reduce the false positives reporting even more.

Bug Fixes

• The scheduled scans can be correctly imported after upgrading to a more recent build of Acunetix WVS 8.
• The false positives settings node can now support changes from multiple instances at the same time.
• Web Service Definition Language (WSDL) Scanner URL edit box is now able to save history.

How to Upgrade to Build 20120508

On starting Acunetix WVS 8, a pop-up window will automatically notify you that a more recent build is available for download. Navigate to the General > Program Updates node in the Tools explorer, click on Download and Install the new build.

View the complete Acunetix WVS change log here.

To keep up to date with the latest website security news, ‘Like’ the Acunetix Facebook Page, follow us on Twitter and read the Acunetix Blog.

THE AUTHOR

Acunetix

Acunetix developers and tech agents regularly contribute to the blog. All the Acunetix developers come with years of experience in the web security sphere.