(PVS) Signatures - Tenable Network Security

connect securely and do not introduce an unacceptable level of risk to the internal
computing environment.
Solution: Ensure that the VPN is acceptable with respect to corporate guidelines and policies.
CVE Not available
Coppermine Gallery < 1.3.4 displayimage.php HTML Injection
PVS ID: 3178 FAMILY: CGI
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to an HTML Injection attack.\n\nThe remote
host is running CopperMine Gallery, a set of PHP scripts to handle galleries of pictures.
There is an injection flaw in this version of Coppermine Gallery. Specifically, the
'displayimage.php' script does not properly sanitize user-supplied images prior to rendering.
An attacker exploiting this flaw can run arbitrary code within the browser of unsuspecting
users.
Solution: Upgrade to version 1.3.4 or higher.
CVE-2005-2676
PHP-Kit Multiple SQL Injection Vulnerabilities
PVS ID: 3179 FAMILY: CGI RISK: HIGH NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote web server contains scripts that are vulnerable to a SQL injection
attack.\n\nThe remote host is running PHP-Kit, an open-source content management
system written in PHP. The remote version of this software is vulnerable to multiple SQL
Injection flaws that may allow an attacker to execute arbitrary SQL statements against the
remote database.
Solution: The PHP-Kit project has been discontinued. All versions of PHP-Kit are vulnerable to a
number of flaws. PHP-Kit is an absolute necessity within your environment, you will need
to delegate resources to fix the security flaws and manage the code.
CVE-2006-1773
RunCMS Multiple SQL Injection Vulnerabilities
Passive Vulnerability Scanner (PVS) Signatures
PVS ID: 3180 FAMILY: CGI RISK: HIGH NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote web server contains a script that is vulnerable to a SQL injection
attack.\n\nThe remote host is running RunCMS, a web-based messaging system. This
version of RunCMS is vulnerable to a remote SQL Injection flaw. An attacker exploiting
this flaw would send specially formatted SQL commands to the web server. Successful
exploitation would allow the attacker to run arbitrary commands on the remote database
server.
Family Internet Services 816