This host is running CGI:IRC and is prone to cross site scripting vulnerability.

Successful exploitation will allow attacker to execute arbitrary HTML and script code in a user's browser session in the context of an affected site. Impact Level: Application

Upgrade to CGI:IRC version 0.5.10 or later, For updates refer to http://cgiirc.org/download/

The flaw is caused by improper validation of user-supplied input passed via the 'R' parameter in the 'nonjs' interface (interfaces/nonjs.pm), that allows attackers to execute arbitrary HTML and script code on the web server.

CGI:IRC versions prior to 0.5.10.

• http://osvdb.org/70844
• http://secunia.com/advisories/43217
• http://www.vupen.com/english/advisories/2011/0346

---

Updated on 2015-03-25