The host is installed with PragmaMX and is prone to multiple cross site scripting vulnerabilities.

Successful exploitation will allow remote attackers to execute arbitrary HTML or web script in a user's browser session in context of an affected site. Impact Level: Application

Upgrade to PragmaMx 1.12.2 or later, For updates refer to http://www.pragmamx.org

Multiple flaws due to input passed via 'name' parameter to modules.php and 'img_url' parameter to img_popup.php is not properly sanitised before being returned to the user.

PragmaMX version 1.12.1 and prior

• http://osvdb.org/82058
• http://osvdb.org/82059
• http://packetstormsecurity.com/files/113035
• http://seclists.org/bugtraq/2012/May/126
• http://www.pragmamx.org/Content-pragmaMx-changelog-item-75.html
• https://www.htbridge.com/advisory/HTB23090

---

Updated on 2015-03-25