CVE-2005-1006: XSS
Multiple cross-site scripting (XSS) vulnerabilities in SonicWALL SOHO 5.1.7.0 allow remote attackers to inject arbitrary web script or HTML via (1) the URL or (2) the user login name, which is not filtered when the administrator views the log file.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2005-1006?
CVE-2005-1006 is classified as a medium severity vulnerability due to its potential for cross-site scripting attacks.
How do I fix CVE-2005-1006?
To remediate CVE-2005-1006, users should upgrade to a patched version of the SonicWALL SOHO firmware that addresses the XSS vulnerabilities.
What types of attacks are possible with CVE-2005-1006?
CVE-2005-1006 allows attackers to perform cross-site scripting attacks by injecting arbitrary scripts or HTML code.
Which versions of SonicWALL are affected by CVE-2005-1006?
CVE-2005-1006 specifically affects SonicWALL SOHO firmware version 5.1.7.0.
Can remote attackers exploit CVE-2005-1006?
Yes, remote attackers can exploit CVE-2005-1006 through unfiltered inputs in the URL or user login name.