CVE-2006-2351 - Multiple cross-site scripting (XSS) vulnerabilities in IPswitch WhatsUp Professional 2006 and WhatsUp Professional 2006 Premium allow remote attackers to inject arbitrary web script or HTML via the (1) sDeviceView or (2) nDeviceID parameter to (a) NmConsole/Navigation.asp or (3) sHostname parameter to (b) NmConsole/ToolResults.asp

Back Back to CVE browser

MEDIUM

Multiple cross-site scripting (XSS) vulnerabilities in IPswitch WhatsUp Professional 2006 and WhatsUp Professional 2006 Premium allow remote attackers to inject arbitrary web script or HTML via the (1) sDeviceView or (2) nDeviceID parameter to (a) NmConsole/Navigation.asp or (3) sHostname parameter to (b) NmConsole/ToolResults.asp

Published May 15, 2006

4.3

MEDIUM

CVSS 2.0

EPSS 4.55%

Description

Multiple cross-site scripting (XSS) vulnerabilities in IPswitch WhatsUp Professional 2006 and WhatsUp Professional 2006 Premium allow remote attackers to inject arbitrary web script or HTML via the (1) sDeviceView or (2) nDeviceID parameter to (a) NmConsole/Navigation.asp or (3) sHostname parameter to (b) NmConsole/ToolResults.asp.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

References (9)

http://secunia.com/advisories/20075
third-party-advisoryx_refsource_SECUNIAExploitVendor Advisory
http://securityreason.com/securityalert/897
third-party-advisoryx_refsource_SREASON
http://www.osvdb.org/25469
vdb-entryx_refsource_OSVDB
http://www.osvdb.org/25470
vdb-entryx_refsource_OSVDB
http://www.securityfocus.com/archive/1/433808
mailing-listx_refsource_BUGTRAQExploitVendor Advisory
http://www.securityfocus.com/bid/17964
vdb-entryx_refsource_BIDExploit
http://www.vupen.com/english/advisories/2006/1787
vdb-entryx_refsource_VUPENVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2006-2352
Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/26500
vdb-entryx_refsource_XF

Link	Providers	Tags
http://secunia.com/advisories/20075		third-party-advisoryx_refsource_SECUNIAExploitVendor Advisory
http://securityreason.com/securityalert/897		third-party-advisoryx_refsource_SREASON
http://www.osvdb.org/25469		vdb-entryx_refsource_OSVDB
http://www.osvdb.org/25470		vdb-entryx_refsource_OSVDB
http://www.securityfocus.com/archive/1/433808		mailing-listx_refsource_BUGTRAQExploitVendor Advisory
http://www.securityfocus.com/bid/17964		vdb-entryx_refsource_BIDExploit
http://www.vupen.com/english/advisories/2006/1787		vdb-entryx_refsource_VUPENVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2006-2352		Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/26500		vdb-entryx_refsource_XF