CVEvulnerability
CVE-2005-1006
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2005-05-02
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Multiple cross-site scripting (XSS) vulnerabilities in SonicWALL SOHO 5.1.7.0 allow remote attackers to inject arbitrary web script or HTML via (1) the URL or (2) the user login name, which is not filtered when the administrator views the log file.
Affected configurations
• sonicwall soho firmware 5.1.7.0
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://archives.neohapsis.com/archives/bugtraq/2005-04/0041.html Broken Link, Exploit
- http://secunia.com/advisories/14823 Not Applicable
- http://securitytracker.com/id?1013638 Broken Link, Third Party Advisory, VDB Entry
- http://www.oliverkarow.de/research/SonicWall.txt Exploit, Third Party Advisory
- http://www.osvdb.org/15261 Broken Link
- http://www.osvdb.org/15262 Broken Link
- http://www.securityfocus.com/bid/12984 Exploit, Third Party Advisory, VDB Entry
- https://exchange.xforce.ibmcloud.com/vulnerabilities/19958 Third Party Advisory, VDB Entry
- https://exchange.xforce.ibmcloud.com/vulnerabilities/19960 Third Party Advisory, VDB Entry
- http://archives.neohapsis.com/archives/bugtraq/2005-04/0041.html Broken Link, Exploit
- http://secunia.com/advisories/14823 Not Applicable
- http://securitytracker.com/id?1013638 Broken Link, Third Party Advisory, VDB Entry
- http://www.oliverkarow.de/research/SonicWall.txt Exploit, Third Party Advisory
- http://www.osvdb.org/15261 Broken Link
- http://www.osvdb.org/15262 Broken Link
- http://www.securityfocus.com/bid/12984 Exploit, Third Party Advisory, VDB Entry
- https://exchange.xforce.ibmcloud.com/vulnerabilities/19958 Third Party Advisory, VDB Entry
- https://exchange.xforce.ibmcloud.com/vulnerabilities/19960 Third Party Advisory, VDB Entry