WEB_CGI fom.cgi access

 

Code: p987

Severity: Notice

 

Description: This event is generated when an attempt is made to access fom.cgi on an internal web server. This may indicate an attempt to exploit a cross-site scripting vulnerability in Faq-O-Matic.

Impact: Arbitrary code execution, possible session hijack.

Corrective: Upgrade to Faq-O-Matic version 2.713 or higher. Upgrades are available at http://faqomatic.sourceforge.net.