CVEvulnerability
CVE-2006-2351
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2006-05-15
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Multiple cross-site scripting (XSS) vulnerabilities in IPswitch WhatsUp Professional 2006 and WhatsUp Professional 2006 Premium allow remote attackers to inject arbitrary web script or HTML via the (1) sDeviceView or (2) nDeviceID parameter to (a) NmConsole/Navigation.asp or (3) sHostname parameter to (b) NmConsole/ToolResults.asp.
Affected configurations
• ipswitch whatsup professional 2006
• ipswitch whatsup professional 2006 premium
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://secunia.com/advisories/20075 Exploit, Vendor Advisory
- http://securityreason.com/securityalert/897 securityreason.com
- http://www.osvdb.org/25469 www.osvdb.org
- http://www.osvdb.org/25470 www.osvdb.org
- http://www.securityfocus.com/archive/1/433808 Exploit, Vendor Advisory
- http://www.securityfocus.com/bid/17964 Exploit
- http://www.vupen.com/english/advisories/2006/1787 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26500 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/20075 Exploit, Vendor Advisory
- http://securityreason.com/securityalert/897 securityreason.com
- http://www.osvdb.org/25469 www.osvdb.org
- http://www.osvdb.org/25470 www.osvdb.org
- http://www.securityfocus.com/archive/1/433808 Exploit, Vendor Advisory
- http://www.securityfocus.com/bid/17964 Exploit
- http://www.vupen.com/english/advisories/2006/1787 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26500 exchange.xforce.ibmcloud.com