PCI scan fails with The remote web server may be prone to HTML injections
Sample Error
The remote web server may be prone to HTML injections
Solution or Workaround
If you see The remote web server hosts CGI scripts that fail to adequately sanitize
request strings with malicious JavaScript in your report, Contact our IT Services as we specialize in fixing this issue. The report may also say by leveraging this issue,
an attacker may be able to cause arbitrary HTML to be executed in a
user's browser within the security context of the affected site.
The remote web server may be vulnerable to IFRAME injections or
cross-site scripting attacks:
- IFRAME injections allow 'virtual defacement' that
might scare or anger gullible users. Such injections
are sometimes implemented for 'phishing' attacks.
- XSS are extensively tested by four other scripts.
- Some applications (e.g. web forums) authorize a subset
of HTML without any ill effect. In this case, ignore
this warning.
request strings with malicious JavaScript in your report, Contact our IT Services as we specialize in fixing this issue. The report may also say by leveraging this issue,
an attacker may be able to cause arbitrary HTML to be executed in a
user's browser within the security context of the affected site.
The remote web server may be vulnerable to IFRAME injections or
cross-site scripting attacks:
- IFRAME injections allow 'virtual defacement' that
might scare or anger gullible users. Such injections
are sometimes implemented for 'phishing' attacks.
- XSS are extensively tested by four other scripts.
- Some applications (e.g. web forums) authorize a subset
of HTML without any ill effect. In this case, ignore
this warning.
Related Topics
Search for help...