Detections
Analytics
PRTG Traffic Grapher login.htm url Parameter XSS
medium Nessus Plugin ID 46857
Language:
Synopsis
A network traffic monitoring application on the remote host has a cross-site scripting vulnerability.Description
The version of PRTG Traffic Grapher hosted on the remote web server is affected by a cross-site scripting vulnerability in the 'url' parameter of the 'login.htm' script.An unauthenticated, remote attacker may be able to exploit this flaw to inject arbitrary HTML and script code in a user's browser.
Solution
Upgrade to PRTG Traffic Grapher 6.2.1.963 / 6.2.1.964 or later.See Also
http://www.aushack.com/201006-prtg.txt
https://www.securityfocus.com/archive/1/511703/30/0/threaded
Plugin Details
Severity: Medium
ID: 46857
File Name: prtg_traffic_grapher_url_param_xss.nasl
Version: 1.11
Type: remote
Family: CGI abuses : XSS
Published: 6/10/2010
Updated: 1/19/2021
Supported Sensors: Nessus
Vulnerability Information
Required KB Items: www/prtg_traffic_grapher
Excluded KB Items: Settings/disable_cgi_scanning
Exploit Available: true
Exploit Ease: Exploits are available
Exploited by Nessus: true
Patch Publication Date: 1/8/2009
Vulnerability Publication Date: 6/8/2010
Reference Information
BID: 40630