Paessler PRTG Cross-Site Scripting Vulnerability

Paessler PRTG is a full-featured network monitoring and management software from Paessler AG, Germany. A cross-site scripting vulnerability exists in versions of Paessler PRTG prior to 16.2.24.4045. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML via SNMP...

CVE-2016-5078

Paessler PRTG before 16.2.24.4045 has XSS via SNMP...

CVE-2016-5078

Paessler PRTG before 16.2.24.4045 has XSS via SNMP...

Code injection

Paessler PRTG before 16.2.24.4045 has XSS via SNMP...

CVE-2016-5078

Paessler PRTG before 16.2.24.4045 has XSS via SNMP...

CVE-2016-5078

CVE-2016-5078 affects Paessler PRTG before version 16.2.24.4045, containing a cross‑site scripting (XSS) vulnerability via SNMP. The description in multiple sources confirms the issue is a PRTG XSS via SNMP path, with the vulnerable component being the PRTG Web UI flow triggered by SNMP data. The...

CVE-2016-5078: Improper Neutralization of Input During Web Page Generation

Paessler PRTG before 16.2.24.4045 has XSS via SNMP...

PT-2017-8694

Name of the Vulnerable Software and Affected Versions Paessler PRTG versions prior to 16.2.24.4045 Description The issue is related to a cross-site scripting XSS vulnerability via SNMP. Recommendations For versions prior to 16.2.24.4045, update to version 16.2.24.4045 or later to resolve the issu...

Xxe

XML external entity vulnerability in PRTG Network Monitor before 16.2.23.3077/3078 allows remote authenticated users to read arbitrary files by creating a new HTTP XML/REST Value sensor that accesses a crafted XML file...

CVE-2015-7743

XML external entity vulnerability in PRTG Network Monitor before 16.2.23.3077/3078 allows remote authenticated users to read arbitrary files by creating a new HTTP XML/REST Value sensor that accesses a crafted XML file...

CVE-2015-7743

XML external entity vulnerability in PRTG Network Monitor before 16.2.23.3077/3078 allows remote authenticated users to read arbitrary files by creating a new HTTP XML/REST Value sensor that accesses a crafted XML file...

CVE-2015-7743

CVE-2015-7743 concerns Paessler PRTG Network Monitor. The vulnerability is an XML External Entity (XXE) expansion flaw in which authenticated users who can create a new HTTP XML/REST Value sensor can read arbitrary files on the PRTG host by supplying crafted XML. Affected versions: before 16.2.23...

CVE-2015-7743: Improper Restriction of XML External Entity Reference

XML external entity vulnerability in PRTG Network Monitor before 16.2.23.3077/3078 allows remote authenticated users to read arbitrary files by creating a new HTTP XML/REST Value sensor that accesses a crafted XML file...

PT-2017-7266

Name of the Vulnerable Software and Affected Versions PRTG Network Monitor versions prior to 16.2.23.3077/3078 Description The issue allows remote authenticated users to read arbitrary files by creating a new HTTP XML/REST Value sensor that accesses a crafted XML file. This is related to an XML...

PRTG Network Monitor XSS Vulnerability

PRTG Network Monitor is prone to a cross-site scripting vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

PRTG Network Monitor Query Detection

Binary data 9516.prm...

PRTG Network Monitor Detection

Binary data 9517.prm...

PRTG Network Monitor Detection

Binary data 9515.prm...

PRTG for Android - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application PRTG for Android published at the 'play' market has multiple vulnerabilities...

CVE-2015-3445: PRTG Network Monitor error.htm and group.htm cross-site scripting

PRTG Network Monitor (Paessler) is affected by a cross-site scripting vulnerability described in CNVD-2016-00127, originating from insufficient input filtering. The CNVD entry notes an XSS in PRTG version 15.1.15.2021 that could cause execution of arbitrary script in a victim’s browser, enabling ...