(PVS) Signatures - Tenable Network Security

email message. Successful exploitation would lead to a Denial of Service or remote code
execution.
Solution: Upgrade to version 1.0.4, 1.9.5 or higher.
CVE-2005-0926
PhotoPost < 5.02 RC3 Multiple Content-parsing Vulnerabilities
PVS ID: 2778 FAMILY: CGI RISK: HIGH NESSUS ID:17649
Description: Synopsis :\n\nThe remote web server contains a script that is vulnerable to a SQL injection
attack.\n\nThe remote host is running PhotoPost, a web-based image gallery written in
PHP. This version of PhotoPost is reported vulnerable to multiple vulnerabilities. Multiple
scripts are reported prone to a Cross-Site Scripting (XSS) vulnerability. Exploiting the XSS
flaws may enable an attacker to inject arbitrary script code into the browser of unsuspecting
users. A successful attack would potentially allow the attacker the ability to view
confidential data (cookies, authentication data, and more) or compromise the integrity of
the local system via the web browser. A second set of issues also affect multiple scripts.
Specifically, multiple scripts are vulnerable to a remote SQL injection attack. An attacker
exploiting this flaw would be able to view and modify database data as well as potentially
execute arbitrary commands.
Solution: Upgrade to PhotoPost 5.02 Release Candidate 3 or higher.
CVE-2005-0928
Horde < 3.0.4 Parent Page Title XSS
PVS ID: 2779 FAMILY: CGI
RISK:
MEDIUM
NESSUS ID:17650
Description: Synopsis :\n\nThe remote host is vulnerable to a Cross-Site Scripting (XSS) attack.\n\nThe
version of Horde installed on the remote host suffers from a cross-site scripting
vulnerability in which an attacker can inject arbitrary HTML and script code via the page
title of a parent frame, enabling him to steal cookie-based authentication credentials and
perform other such attacks.
Solution: Upgrade to version 3.0.4 or higher.
CVE-2005-0961
MailReader < 2.3.36 network.cgi MIME Message XSS
PVS ID: 2780 FAMILY: CGI
Passive Vulnerability Scanner (PVS) Signatures
RISK:
MEDIUM
NESSUS ID:17657
Description: Synopsis :\n\nThe remote host is vulnerable to an HTML injection attack.\n\nThe remote
host is running Mailreader, a web-based application which can be used to read email. This
version of Mailreader is vulnerable to a remote HTML injection flaw. An attacker
exploiting this flaw would need to be able to convince a Mailreader user to open a
Family Internet Services 715