Debian Security Advisory DSA 1374-1 (jffnms)

The remote host is missing an update to jffnms announced via advisory DSA 1374-1. OpenVAS Vulnerability Test $Id: deb13741.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1374-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

DSA-1374-1 jffnms - several vulnerabilities

Bulletin has no description...

CVE-2007-3189

Cross-site scripting XSS vulnerability in auth.php in Just For Fun Network Management System JFFNMS 0.8.3 allows remote attackers to inject arbitrary web script or HTML via the user parameter...

CVE-2007-3189

The CVE-2007-3189 entry relates to a Cross-site scripting (XSS) vulnerability in JFFNMS 0.8.3, where an attacker can inject script via the user parameter in auth.php. Affected product: Just For Fun Network Management System (JFFNMS) 0.8.3. Impact: remote script/HTML injection as described. Remedi...