483 matches found
PRTG Network Monitor Default Credentials
It is possible to log into the remote PRTG Network Monitor installation by providing the default credentials. A remote attacker could exploit this to gain administrative control of the PRTG Network Monitor installation. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...
PRTG Network Monitor login.htm errormsg Parameter XSS
The installed version of PRTG Network Monitor fails to sanitize input passed to 'errormsg' parameter in 'login.htm' before using it to generate dynamic HTML content. An unauthenticated, remote attacker may be able to leverage this issue to inject arbitrary HTML or script code into a user's browse...
PRTG Network Monitor Detection
PRTG Network Monitor, a web-based tool for displaying network and bandwidth usage data, is hosted on the remote web server. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid51874; scriptversion"1.9"; scriptsetattributeattribute:"pluginmodificationdate",...
PRTG V8.1.2.1809 XSS Bugs in login.htm and error.htm
XSS Reflected Bugs in login.htm and error.htm ================================================================ PRTG V8.1.2.1809 All OS Versions: http://www.paessler.com/ I have discovered two XSS bugs within PRTG version 8.1.2.1809. These bugs are in the login.htm and error.htm documents. These...
PRTG Network Monitor 'errormsg' Parameter Multiple Cross Site Scripting Vulnerabilities
PRTG Network Monitor is prone to multiple cross-site-scripting vulnerabilities because it fails to properly sanitize user-supplied input. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...
PRTG Network Monitor 'errormsg' Parameter Multiple Cross Site Scripting Vulnerabilities
PRTG Network Monitor is prone to multiple cross-site-scripting vulnerabilities because it fails to properly sanitize user- supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may le...
PRTG Network Monitor Detection
Detection of PRTG Network Monitor. The script attempts to identify PRTG Network Monitor and to extract the version number. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
PRTG 8.1.2.1809 Cross Site Scripting
XSS Reflected Bugs in login.htm and error.htm ================================================================ PRTG V8.1.2.1809 All OS Versions: http://www.paessler.com/ I have discovered two XSS bugs within PRTG version 8.1.2.1809. These bugs are in the login.htm and error.htm documents. These...
Paessler - PRTG Traffic Grapher XSS
aushack.com - Vulnerability Advisory ----------------------------------------------- Release Date: 08-Jun-2010 Software: Paessler - PRTG Traffic Grapher http://www.paessler.com "PRTG Network Monitor runs 24/7 on a Windows-based machine within your network, recording network usage parameters...
PRTG Traffic Grapher Detection
PRTG Traffic Grapher, a web-based tool for displaying network usage data, is hosted on the remote web server. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid46856; scriptversion"1.7"; scriptcvsdate"Date: 2019/11/22"; scriptnameenglish:"PRTG Traffic Grapher Detection"...
PRTG Traffic Grapher < 6.2.1.963 / 9.2.1.964 Cross-Site Scripting Vulnerability
Binary data 5568.prm...
Paessler PRTG Traffic Grapher 6.2.1.945 Cross Site Scripting
aushack.com - Vulnerability Advisory ----------------------------------------------- Release Date: 08-Jun-2010 Software: Paessler - PRTG Traffic Grapher http://www.paessler.com "PRTG Network Monitor runs 24/7 on a Windows-based machine within your network, recording network usage parameters...
PRTG Traffic Grapher Monitor_Bandwidth函数跨站脚本漏洞
BUGTRAQ ID: 35128 CVECAN ID: CVE-2009-1849 PRTG Traffic Grapher是一个使用方便的Windows软件，能够对网络带宽的使用进行监控和分类。 PRTG Traffic Grapher没有正确地验证对MonitorBandwidth函数所提交的输入参数，如果用户受骗跟随了包含有恶意脚本的链接的话，就会导致在用户浏览器会话中执行跨站脚本。 Paessler PRTG Traffic Grapher 6.2.2.977 厂商补丁： Paessler -------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...
Cross site scripting
Cross-site scripting XSS vulnerability in the MonitorBandwidth function in PRTG Traffic Grapher 6.2.2.977 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2009-1849
Cross-site scripting XSS vulnerability in the MonitorBandwidth function in PRTG Traffic Grapher 6.2.2.977 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2009-1849
The CVE-2009-1849 issue affects PRTG Traffic Grapher, specifically the Monitor_Bandwidth function. Affected version: 6.2.2.977 and earlier. Root cause: cross-site scripting (XSS) due to improper handling of input, allowing an attacker to inject arbitrary scripts/HTML via unspecified vectors. Impa...
CVE-2009-1849
Cross-site scripting XSS vulnerability in the MonitorBandwidth function in PRTG Traffic Grapher 6.2.2.977 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
PRTG Traffic Grapher 'Monitor_Bandwidth' Cross Site Scripting Vulnerability
PRTG Traffic Grapher is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
PRTG Traffic Grapher 'Monitor_Bandwidth' Cross Site Scripting Vulnerability
PRTG Traffic Grapher is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the...
CVE-2009-1849: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the MonitorBandwidth function in PRTG Traffic Grapher 6.2.2.977 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...