CVE-2006-2351

MEDIO 4.3CVE-2006-2351 · Published 15/05/2006 · updated 16/06/2026

In breve

CVE-2006-2351 è una vulnerabilità MEDIO (CVSS 4.3) che riguarda whatsup professional (ipswitch).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 4.7%, superiore al 91.7% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
whatsup professional ipswitch	`= 2006= 2006_premium`	No fix yet

Description

Multiple cross-site scripting (XSS) vulnerabilities in IPswitch WhatsUp Professional 2006 and WhatsUp Professional 2006 Premium allow remote attackers to inject arbitrary web script or HTML via the (1) sDeviceView or (2) nDeviceID parameter to (a) NmConsole/Navigation.asp or (3) sHostname parameter to (b) NmConsole/ToolResults.asp.

References

secunia.com/advisories/20075 · Exploit
securityreason.com/securityalert/897
osvdb.org/25469
osvdb.org/25470
securityfocus.com/archive/1/433808 · Exploit
securityfocus.com/bid/17964 · Exploit
vupen.com/english/advisories/2006/1787 · Vendor Advisory
exchange.xforce.ibmcloud.com/vulnerabilities/26500

Altre vulnerabilità di whatsup professional

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

whatsup professional

ipswitch

= 2006= 2006_premium

No fix yet

Description

Altre vulnerabilità di whatsup professional

Vedi tutto →