ipswitch whatsup professional 2006 premium vulnerabilities and exploits

(subscribe to this query)

Ipswitch WhatsUp Professional 2006 and WhatsUp Professional 2006 Premium allows remote malicious users to obtain source code for scripts via a trailing dot in a request to NmConsole/Login.asp.

Ipswitch Whatsup Professional 2006 Ipswitch Whatsup Professional 2006 Premium

NmConsole/DeviceSelection.asp in Ipswitch WhatsUp Professional 2006 and WhatsUp Professional 2006 Premium allows remote malicious users to redirect users to other websites via the (1) sCancelURL and possibly (2) sRedirectUrl parameters.

Ipswitch Whatsup Professional 2006 Ipswitch Whatsup Professional 2006 Premium

Ipswitch WhatsUp Professional 2006 and Ipswitch WhatsUp Professional 2006 Premium allows remote malicious users to obtain full path information via 404 error messages. NOTE: the provenance of this information is unknown; the details are obtained solely from third party informatio...

Ipswitch Whatsup Professional 2006 Ipswitch Whatsup Professional 2006 Premium

NmConsole/Login.asp in Ipswitch WhatsUp Professional 2006 and Ipswitch WhatsUp Professional 2006 Premium generates different error messages in a way that allows remote malicious users to enumerate valid usernames. NOTE: the provenance of this information is unknown; the details a...

Ipswitch Whatsup Professional 2006 Premium Ipswitch Whatsup Professional 2006

Multiple cross-site scripting (XSS) vulnerabilities in IPswitch WhatsUp Professional 2006 and WhatsUp Professional 2006 Premium allow remote malicious users to inject arbitrary web script or HTML via the (1) sDeviceView or (2) nDeviceID parameter to (a) NmConsole/Navigation.asp o...

Ipswitch Whatsup Professional 2006 Ipswitch Whatsup Professional 2006 Premium

2 EDB exploits

Multiple cross-site scripting (XSS) vulnerabilities in IPswitch WhatsUp Professional 2006 and WhatsUp Professional 2006 Premium allow remote malicious users to inject arbitrary web script or HTML via unknown vectors in (1) NmConsole/Tools.asp and (2) NmConsole/DeviceSelection.asp...

Ipswitch Whatsup Professional 2006 Ipswitch Whatsup Professional 2006 Premium

NmConsole/utility/RenderMap.asp in Ipswitch WhatsUp Professional 2006 and WhatsUp Professional 2006 Premium allows remote malicious users to obtain sensitive information about network nodes via a modified nDeviceGroupID parameter.

Ipswitch Whatsup Professional 2006

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook