CVEvulnerability
CVE-2009-1849
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2009-06-01
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Cross-site scripting (XSS) vulnerability in the Monitor_Bandwidth function in PRTG Traffic Grapher 6.2.2.977 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected configurations
• paessler prtg traffic grapher (<= 6.2.977)
• paessler prtg traffic grapher 4.0.7.139
• paessler prtg traffic grapher 4.0.8.154
• paessler prtg traffic grapher 4.1.0.256
• paessler prtg traffic grapher 4.1.0.257
• paessler prtg traffic grapher 4.1.0.265
• paessler prtg traffic grapher 4.1.0.266
• paessler prtg traffic grapher 4.2.0.356
• paessler prtg traffic grapher 4.2.0.357
• paessler prtg traffic grapher 4.2.0.363
• paessler prtg traffic grapher 4.2.0.364
• paessler prtg traffic grapher 4.2.1.385
• paessler prtg traffic grapher 4.2.1.386
• paessler prtg traffic grapher 4.3.0.470
• paessler prtg traffic grapher 4.3.0.471
• paessler prtg traffic grapher 4.3.1.498
• paessler prtg traffic grapher 4.3.1.505
• paessler prtg traffic grapher 4.3.1.510
• paessler prtg traffic grapher 4.3.1.522
• paessler prtg traffic grapher 4.3.1.534
• paessler prtg traffic grapher 4.3.1.562
• paessler prtg traffic grapher 4.3.1.566
• paessler prtg traffic grapher 5.0.1.300
• paessler prtg traffic grapher 5.0.1.310
• paessler prtg traffic grapher 5.0.1.356
• paessler prtg traffic grapher 5.0.3.379
• paessler prtg traffic grapher 5.0.3.398
• paessler prtg traffic grapher 5.1.0.452
• paessler prtg traffic grapher 5.1.1.474
• paessler prtg traffic grapher 5.2.0.548
• paessler prtg traffic grapher 5.2.0.549
• paessler prtg traffic grapher 5.2.0.559
• paessler prtg traffic grapher 5.2.0.560
• paessler prtg traffic grapher 5.2.0.565
• paessler prtg traffic grapher 5.2.0.566
• paessler prtg traffic grapher 5.2.0.574
• paessler prtg traffic grapher 5.2.0.575
• paessler prtg traffic grapher 5.2.0.581
• paessler prtg traffic grapher 5.2.0.582
• paessler prtg traffic grapher 5.3.0.687
• paessler prtg traffic grapher 5.3.0.738
• paessler prtg traffic grapher 5.3.0.739
• paessler prtg traffic grapher 5.3.0.758
• paessler prtg traffic grapher 5.3.0.759
• paessler prtg traffic grapher 5.3.0.812
• paessler prtg traffic grapher 5.3.0.813
• paessler prtg traffic grapher 5.3.0.833
• paessler prtg traffic grapher 5.3.0.834
• paessler prtg traffic grapher 5.3.0.862
• paessler prtg traffic grapher 5.3.0.863
• paessler prtg traffic grapher 6.0.2.255
• paessler prtg traffic grapher 6.0.2.256
• paessler prtg traffic grapher 6.0.3.258
• paessler prtg traffic grapher 6.0.3.259
• paessler prtg traffic grapher 6.0.3.261
• paessler prtg traffic grapher 6.0.3.262
• paessler prtg traffic grapher 6.0.3.284
• paessler prtg traffic grapher 6.0.3.285
• paessler prtg traffic grapher 6.0.4.332
• paessler prtg traffic grapher 6.0.4.333
… and 35 more
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://blog.bkis.com/?p=704 blog.bkis.com
- http://secunia.com/advisories/35249 Vendor Advisory
- http://www.paessler.com/support/kb/questions/prtg6history Patch, Vendor Advisory
- http://www.securityfocus.com/bid/35128 www.securityfocus.com
- http://blog.bkis.com/?p=704 blog.bkis.com
- http://secunia.com/advisories/35249 Vendor Advisory
- http://www.paessler.com/support/kb/questions/prtg6history Patch, Vendor Advisory
- http://www.securityfocus.com/bid/35128 www.securityfocus.com