FreeBSD Ports: squidclamav

The remote host is missing an update to the system as announced in the referenced advisory. VID ce680f0a-eea6-11e1-8bd8-0022156e8794 OpenVAS Vulnerability Test $ Description: Auto generated from VID ce680f0a-eea6-11e1-8bd8-0022156e8794 Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

CVE-2012-4667

Multiple cross-site scripting XSS vulnerabilities in SquidClamav 5.x before 5.8 allow remote attackers to inject arbitrary web script or HTML via the 1 url, 2 virus, 3 source, or 4 user parameter to a clwarn.cgi, b clwarn.cgi.deDE, c clwarn.cgi.enEN, d clwarn.cgi.frFR, e clwarn.cgi.ptBR, or f...

CVE-2012-4667

SquidClamav 5.x is vulnerable to multiple XSS flaws (notably via clwarn.cgi parameters: url, virus, source, user) due to improper sanitization of user input. These issues affect CGI scripts under cgi-bin/ and allow remote attackers to inject arbitrary script/HTML in victims’ browsers. The CVE has...