CVE-2006-2351

Description

Multiple cross-site scripting (XSS) vulnerabilities in IPswitch WhatsUp Professional 2006 and WhatsUp Professional 2006 Premium allow remote attackers to inject arbitrary web script or HTML via the (1) sDeviceView or (2) nDeviceID parameter to (a) NmConsole/Navigation.asp or (3) sHostname parameter to (b) NmConsole/ToolResults.asp.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/26500

http://www.vupen.com/english/advisories/2006/1787

http://www.osvdb.org/25470

http://www.osvdb.org/25469

http://securityreason.com/securityalert/897

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3