Unscored severity · published May 15, 2006
CVE-2006-2351
Multiple cross-site scripting (XSS) vulnerabilities in IPswitch WhatsUp Professional 2006 and WhatsUp Professional 2006 Premium allow remote attackers to inject arbitrary web…
–
CVSS
4.5%
EPSS
No
On KEV
Description
Multiple cross-site scripting (XSS) vulnerabilities in IPswitch WhatsUp Professional 2006 and WhatsUp Professional 2006 Premium allow remote attackers to inject arbitrary web script or HTML via the (1) sDeviceView or (2) nDeviceID parameter to (a) NmConsole/Navigation.asp or (3) sHostname parameter to (b) NmConsole/ToolResults.asp.
Exploitation
Is it being used?
Exploit prediction (EPSS)4.5% · higher than 92% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
WP
Whatsup Professional · Ipswitch
2006; 2006_premium · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-2351
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-2351
Exploit
http://secunia.com/advisories/20075
securityreason.com
http://securityreason.com/securityalert/897
www.osvdb.org
http://www.osvdb.org/25469
www.osvdb.org
http://www.osvdb.org/25470
Exploit
http://www.securityfocus.com/archive/1/433808
Exploit
http://www.securityfocus.com/bid/17964
More from Whatsup Professional
–
CVE-2006-2352
Multiple cross-site scripting (XSS) vulnerabilities in IPswitch WhatsUp Professional 2006 and WhatsUp Professional 2006 Premium allow remote attackers to inject arbitrary web…
–
CVE-2006-2353
NmConsole/DeviceSelection.asp in Ipswitch WhatsUp Professional 2006 and WhatsUp Professional 2006 Premium allows remote attackers to redirect users to other websites via the (1)…
–
CVE-2006-2354
NmConsole/Login.asp in Ipswitch WhatsUp Professional 2006 and Ipswitch WhatsUp Professional 2006 Premium generates different error messages in a way that allows remote attackers…
–
CVE-2006-2355
Ipswitch WhatsUp Professional 2006 and Ipswitch WhatsUp Professional 2006 Premium allows remote attackers to obtain full path information via 404 error messages
–
CVE-2006-2356
NmConsole/utility/RenderMap.asp in Ipswitch WhatsUp Professional 2006 and WhatsUp Professional 2006 Premium allows remote attackers to obtain sensitive information about network…