Info

Disclosure

Sep 27, 2011

Discovery

Unknown

Dates

Exploit

Oct 05, 2011

Solution

Unknown

Description

ServersCheck Monitoring contains a flaw that allows a remote cross-site scripting (XSS) attack. This flaw exists because the application does not validate the 'linenumber', 'id' and 'check' parameters upon submission to the checks2def.html script. This may allow a user to create a specially crafted URL that would execute arbitrary script code in a user's browser within the trust relationship between their browser and the server.

Classification

Location: Remote / Network Access
Attack Type: Input Manipulation
Impact: Loss of Integrity
Solution: Solution Unknown
Exploit: Exploit Public
Disclosure: Uncoordinated Disclosure
OSVDB: Web Related

Solution

OSVDB is not aware of a solution for this vulnerability.

Products

ServersCheck BVBA

ServersCheck Monitoring

8.8.11

References

Secunia Advisory ID: 46150
Related OSVDB ID: 76036 76037 76038 76039 76040 76041 76042 76043 76044 76045 76046 76047 76048 76049 76050 76051 76052 76053 76054 76055
Mail List Post: http://seclists.org/fulldisclosure/2011/Sep/289
Other Advisory URL: http://www.vulnerability-lab.com/get_content.php?id=93

Credit

Unknown or Incomplete

Direct URL: http://osvdb.org/76035