Acunetix Web Vulnerability Scanner version 9.5 build 20140902 has been updated to include new vulnerability checks, including detection of Hibernate Query Injection, format strings vulnerabilities, MySQL username disclosure and others, including some, in well-known web applications. This new build also optimises existing checks, including its XSS and SQL Injection detection scripts.
The following is a full list of updates included in this release.
New Features
- Implemented a test for format strings vulnerabilities in web applications
- Implemented support for Hibernate Query Injection
- Implemented a check for MySQL username disclosure in error messages
- Implemented a test looking for vBulletin 5 SQL injection
- Implemented detection of Multiple Vulnerabilities in Parallels Plesk Sitebuilder
- Implemented a test looking for WordPress XMLRPC bruteforce
- Implemented a test for Remote File Upload vulnerability in Mailpoet/Wysija newsletters popular WordPress plugin
- Implemented a test for Insecure Nonce Generation in popular WordPress plugin WPTouch
- Implemented a test looking for various JSP access restriction bypasses in Java web applications
- Implemented detection of multiple vulnerabilities in Kunena Forum for Joomla
- Implemented a test checking if applets are permitted when file uploads are possible (this will lead to XSS vulnerabilities)
- Added a test for Java Debug Wire Protocol vulnerabilities
- Added a test for Zabbix XXE
- Added a test looking for Weblogic console default credentials
- Added a test for Symphony debugging console enabled
- Added a test for some MongoDB vulnerabilities
- Added a test looking for Chrome Logger information disclosure
- Added a generic script looking for unsecured mail forms that could lead to spam
- Added a test to check if ASP.NET Viewstate MAC is enabled
- Implemented a test for WordPress/Drupal/… XML quadratic blowup denial of service attack
- Added a test looking for HTML injection with unterminated tag
- Added a test for WordPress plugin Custom Contact Forms.
Improvements
- Various optimisations to Amazon S3 related scripts such as XXE and SSRF
- Improved the script looking for possible sensitive files
- XSS script can now find less common XSS variants such as double encode payloads
- SQL injection script checks for other variants such as SQL injection in order by, group by
- XSS script now checks for many user controllable tag attributes
- Various optimizations in the generation of reports
- Improved Server Directory Traversal script
- Improved Host Header Attack script
Bug Fixes
- Fixed JS errors that appear in HTTP editor.
- Restricted links matching was not working in some situations.
- Fixed the slow response time alert – moved alert details from description.
- Fixed a false positive with Struts2_Development_Mode script.
- Auto login crash if requests were failing after a long time.
- Existing cookies from manual browsing were ignored by crawler.
- Reduced some false positives in Backup file reporting.
- Login Sequence Recorder will delete the cookies it collected in the wizard.
- Crawler will use cookies from LSR in manual mode.
How to Upgrade
If you are running Acunetix Web Vulnerability Scanner v9.5, you will be notified that a new build is available to download when you start the application. Navigate to the General > Program Updates node in the Tools explorer, click on Download and Install the new build.
If you are running Acunetix WVS v8 or v9, you should follow the upgrade instructions available in the “Upgrading from a previous version of Acunetix Web Vulnerability Scanner” in the Acunetix WVS user manual.
You can see the complete Acunetix WVS change log here. If you have any technical questions, feel free to email the Acunetix Support Team.
Get the latest content on web security
in your inbox each week.
THE AUTHOR
