373 matches found
Improper access control
An issue was discovered in PRTG 7.x through 19.4.53. Due to insufficient access control on local registry keys for the Core Server Service, a non-administrative user on the local machine is able to access administrative credentials...
CVE-2019-19119
PRTG Network Monitor (versions 7.x–19.4.53) exposes admin credentials due to insufficient access control on local registry keys for the Core Server Service. This local-privilege issue can be exploited by a non-administrative user on the same machine; CVSS metrics indicate Confidentiality Impact H...
CVE-2019-19119
An issue was discovered in PRTG 7.x through 19.4.53. Due to insufficient access control on local registry keys for the Core Server Service, a non-administrative user on the local machine is able to access administrative credentials...
CVE-2019-9206
PRTG Network Monitor v7.1.3.3378 allows XSS via the /public/login.htm errormsg or loginurl parameter. NOTE: This product is discontinued...
CVE-2019-9206
PRTG Network Monitor v7.1.3.3378 allows XSS via the /public/login.htm errormsg or loginurl parameter. NOTE: This product is discontinued...
CVE-2019-9207
PRTG Network Monitor v7.1.3.3378 allows XSS via the /search.htm searchtext parameter. NOTE: This product is discontinued...
CVE-2019-9207
PRTG Network Monitor v7.1.3.3378 allows XSS via the /search.htm searchtext parameter. NOTE: This product is discontinued...
Design/Logic Flaw
PRTG Network Monitor v7.1.3.3378 allows XSS via the /search.htm searchtext parameter. NOTE: This product is discontinued...
Design/Logic Flaw
PRTG Network Monitor v7.1.3.3378 allows XSS via the /public/login.htm errormsg or loginurl parameter. NOTE: This product is discontinued...
CVE-2019-9207
CVE-2019-9207 affects PRTG Network Monitor 7.1.3.3378 . The vulnerability is an XSS flaw exploitable via the /search.htm endpoint using the searchtext parameter. Public records consistently describe a cross-site scripting vulnerability in this version; the product is noted as discontinued. The co...
CVE-2019-9207
PRTG Network Monitor v7.1.3.3378 allows XSS via the /search.htm searchtext parameter. NOTE: This product is discontinued...
CVE-2019-9206
PRTG Network Monitor v7.1.3.3378 allows XSS via the /public/login.htm errormsg or loginurl parameter. NOTE: This product is discontinued...
CVE-2019-9206
The CVE-2019-9206 entry concerns Paessler AG PRTG Network Monitor v7.1.3.3378, which allows cross-site scripting via the /public/login.htm endpoint using the errormsg or loginurl parameters. The description indicates a reflected-type XSS that could inject arbitrary scripts through these parameter...
PRTG Network Monitor < 19.1.49.1966 Multiple Vulnerabilities
PRTG Network Monitor is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
CVE-2018-14683
PRTG before 19.1.49.1966 has Cross Site Scripting XSS in the WEBGUI...
Cross site scripting
PRTG before 19.1.49.1966 has Cross Site Scripting XSS in the WEBGUI...
CVE-2018-14683
PRTG before 19.1.49.1966 has Cross Site Scripting XSS in the WEBGUI...
CVE-2018-14683
PRTG before 19.1.49.1966 has Cross Site Scripting XSS in the WEBGUI...
CVE-2018-14683
CVE-2018-14683 affects PRTG Network Monitor prior to 19.1.49.1966, with Cross Site Scripting (XSS) in the WEBGUI reported. Public sources in the connected documents confirm the issue and describe the impact as an XSS vulnerability in the WEBGUI interface. The CVSS metrics shown in the connected r...
PRTG Network Monitor 18.2.38 - Authenticated Remote Code Execution Exploit
Exploit for windows platform in category web applications !/bin/bash echo -e "\n\e00;33m++ \e00m" echo -e "\e00;32m Authenticated PRTG network Monitor remote code execution \e00m" echo -e "\e00;33m++ \e00m" echo -e "\e00;32m Date: 11/03/2019 \e00m" echo -e "\e00;33m++ \e00m" echo -e "\e00;32m...