CVE-2006-2351: XSS
First published: Mon May 15 2006(Updated: )
Multiple cross-site scripting (XSS) vulnerabilities in IPswitch WhatsUp Professional 2006 and WhatsUp Professional 2006 Premium allow remote attackers to inject arbitrary web script or HTML via the (1) sDeviceView or (2) nDeviceID parameter to (a) NmConsole/Navigation.asp or (3) sHostname parameter to (b) NmConsole/ToolResults.asp.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Ipswitch WhatsUp | =2006_premium | |
| Ipswitch WhatsUp | =2006 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.securityfocus.com/archive/1/433808
- http://www.securityfocus.com/bid/17964
- http://secunia.com/advisories/20075
- http://www.osvdb.org/25469
- http://www.osvdb.org/25470
- http://securityreason.com/securityalert/897
- http://www.vupen.com/english/advisories/2006/1787
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26500
Frequently Asked Questions
What is the severity of CVE-2006-2351?
CVE-2006-2351 has a medium severity level due to its potential for exploitation via cross-site scripting.
How do I fix CVE-2006-2351?
To mitigate CVE-2006-2351, update IPswitch WhatsUp Professional to the latest version that addresses these vulnerabilities.
What are the affected versions of IPswitch in CVE-2006-2351?
CVE-2006-2351 affects IPswitch WhatsUp Professional version 2006 and 2006 Premium.
What types of attacks can CVE-2006-2351 facilitate?
CVE-2006-2351 can enable remote attackers to execute arbitrary scripts or HTML through cross-site scripting attacks.
What parameters are involved in exploiting CVE-2006-2351?
The parameters involved in CVE-2006-2351 exploitation are sDeviceView, nDeviceID, and sHostname.
- agent/references
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/weakness
- agent/last-modified-date
- agent/description
- agent/first-publish-date
- agent/author
- agent/event
- agent/source
- agent/tags
- collector/nvd-historical
- agent/software-canonical-lookup-request
- collector/nvd-index
- vendor/ipswitch
- canonical/ipswitch whatsup
- version/ipswitch whatsup/2006_premium
- version/ipswitch whatsup/2006