CVE-2006-2351: XSS
Multiple cross-site scripting (XSS) vulnerabilities in IPswitch WhatsUp Professional 2006 and WhatsUp Professional 2006 Premium allow remote attackers to inject arbitrary web script or HTML via the (1) sDeviceView or (2) nDeviceID parameter to (a) NmConsole/Navigation.asp or (3) sHostname parameter to (b) NmConsole/ToolResults.asp.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2006-2351?
CVE-2006-2351 has a medium severity level due to its potential for exploitation via cross-site scripting.
How do I fix CVE-2006-2351?
To mitigate CVE-2006-2351, update IPswitch WhatsUp Professional to the latest version that addresses these vulnerabilities.
What are the affected versions of IPswitch in CVE-2006-2351?
CVE-2006-2351 affects IPswitch WhatsUp Professional version 2006 and 2006 Premium.
What types of attacks can CVE-2006-2351 facilitate?
CVE-2006-2351 can enable remote attackers to execute arbitrary scripts or HTML through cross-site scripting attacks.
What parameters are involved in exploiting CVE-2006-2351?
The parameters involved in CVE-2006-2351 exploitation are sDeviceView, nDeviceID, and sHostname.