Summary
This host is running ExpressionEngine CMS and is prone to Cross Site Scripting vulnerability.
Impact
Successful exploitation will allow remote attackers to inject arbitrary HTML codes in an image by tricking the user to view a malicious profile page.
Impact Level: Application
Solution
Update ExpressionEngine to version 1.6.7
http://expressionengine.com
Insight
Inadequate validation of user supplied input to the system/index.php script leads to cross site attacks.
Affected
ExpresssionEngine versions prior to 1.6.7 on all platforms.
References
Severity
Classification
-
CVE CVE-2009-1070 -
CVSS Base Score: 4.3
AV:N/AC:M/Au:N/C:N/I:P/A:N
Related Vulnerabilities