[hack3rcon]

Hello.
When a web site Scanned by tools like "Nessus" , "Acunetix",...and these tools found critical Vulnerabilities, Then how can I attack to target? For example, How can I use this Vulnerability:
"http://i68.t i n y p i c.com/30m47j4.png"

Thank you.

[CyberStrike]

Well done you just added 100's of lines to their log files and alerts sent to administrators. You just pretty much went to their homes and business setup a fireworks display then pulled out a bull horn and announced it just for good measure. If you are unsure what to do at this point you should look at the CWE's referenced, if still unsure then it's time to go learn about webapps and CMS's.

[hack3rcon]

Well done you just added 100's of lines to their log files and alerts sent to administrators. You just pretty much went to their homes and business setup a fireworks display then pulled out a bull horn and announced it just for good measure. If you are unsure what to do at this point you should look at the CWE's referenced, if still unsure then it's time to go learn about webapps and CMS's.

Looked but not showed me how to use this Vulnerability and how to attack!

[CyberStrike]

Looked but not showed me how to use this Vulnerability and how to attack!

Inspect the code, of where the vulnerability is located. Remember that false positives happen so manual inspection is a good idea. Once again learning about webapp pentesting is an option perhaps not the quickest but you won't have all these doubts (not questions but doubts).

[Baud]

Looked but not showed me how to use this Vulnerability and how to attack!

CWE stands for Common Weakness Enumeration, these entries are most useful for manual exploitation as they tell you more about how the web application you're scanning works and their possible weaknesses, they don't point you to an automated exploit you can just launch against it. If you know what you're doing and you read what those CWE codes are about then you should know how to proceed (cwe.mitre.org is very explicit on how to test for flaws related to those codes), if you can't figure out a way to use the information you found you should spend more time learning a thing or two about pentesting before dedicating yourself to illegal activities, because I'm sure nobody hired you for a security check on that website.

Cheers.

Spoiler (Click to View)By the way a score of 6.5 can't be considered a "critical vulnerability"