4.3

CVE-2009-1849

Cross-site scripting (XSS) vulnerability in the Monitor_Bandwidth function in PRTG Traffic Grapher 6.2.2.977 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Paessler ≫ Prtg Traffic Grapher Version <= 6.2.977
Paessler ≫ Prtg Traffic Grapher Version 4.0.7.139
Paessler ≫ Prtg Traffic Grapher Version 4.0.8.154
Paessler ≫ Prtg Traffic Grapher Version 4.1.0.256
Paessler ≫ Prtg Traffic Grapher Version 4.1.0.257
Paessler ≫ Prtg Traffic Grapher Version 4.1.0.265
Paessler ≫ Prtg Traffic Grapher Version 4.1.0.266
Paessler ≫ Prtg Traffic Grapher Version 4.2.0.356
Paessler ≫ Prtg Traffic Grapher Version 4.2.0.357
Paessler ≫ Prtg Traffic Grapher Version 4.2.0.363
Paessler ≫ Prtg Traffic Grapher Version 4.2.0.364
Paessler ≫ Prtg Traffic Grapher Version 4.2.1.385
Paessler ≫ Prtg Traffic Grapher Version 4.2.1.386
Paessler ≫ Prtg Traffic Grapher Version 4.3.0.470
Paessler ≫ Prtg Traffic Grapher Version 4.3.0.471
Paessler ≫ Prtg Traffic Grapher Version 4.3.1.498
Paessler ≫ Prtg Traffic Grapher Version 4.3.1.505
Paessler ≫ Prtg Traffic Grapher Version 4.3.1.510
Paessler ≫ Prtg Traffic Grapher Version 4.3.1.522
Paessler ≫ Prtg Traffic Grapher Version 4.3.1.534
Paessler ≫ Prtg Traffic Grapher Version 4.3.1.562
Paessler ≫ Prtg Traffic Grapher Version 4.3.1.566
Paessler ≫ Prtg Traffic Grapher Version 5.0.1.300
Paessler ≫ Prtg Traffic Grapher Version 5.0.1.310
Paessler ≫ Prtg Traffic Grapher Version 5.0.1.356
Paessler ≫ Prtg Traffic Grapher Version 5.0.3.379
Paessler ≫ Prtg Traffic Grapher Version 5.0.3.398
Paessler ≫ Prtg Traffic Grapher Version 5.1.0.452
Paessler ≫ Prtg Traffic Grapher Version 5.1.1.474
Paessler ≫ Prtg Traffic Grapher Version 5.2.0.548
Paessler ≫ Prtg Traffic Grapher Version 5.2.0.549
Paessler ≫ Prtg Traffic Grapher Version 5.2.0.559
Paessler ≫ Prtg Traffic Grapher Version 5.2.0.560
Paessler ≫ Prtg Traffic Grapher Version 5.2.0.565
Paessler ≫ Prtg Traffic Grapher Version 5.2.0.566
Paessler ≫ Prtg Traffic Grapher Version 5.2.0.574
Paessler ≫ Prtg Traffic Grapher Version 5.2.0.575
Paessler ≫ Prtg Traffic Grapher Version 5.2.0.581
Paessler ≫ Prtg Traffic Grapher Version 5.2.0.582
Paessler ≫ Prtg Traffic Grapher Version 5.3.0.687
Paessler ≫ Prtg Traffic Grapher Version 5.3.0.738
Paessler ≫ Prtg Traffic Grapher Version 5.3.0.739
Paessler ≫ Prtg Traffic Grapher Version 5.3.0.758
Paessler ≫ Prtg Traffic Grapher Version 5.3.0.759
Paessler ≫ Prtg Traffic Grapher Version 5.3.0.812
Paessler ≫ Prtg Traffic Grapher Version 5.3.0.813
Paessler ≫ Prtg Traffic Grapher Version 5.3.0.833
Paessler ≫ Prtg Traffic Grapher Version 5.3.0.834
Paessler ≫ Prtg Traffic Grapher Version 5.3.0.862
Paessler ≫ Prtg Traffic Grapher Version 5.3.0.863
Paessler ≫ Prtg Traffic Grapher Version 6.0.2.255
Paessler ≫ Prtg Traffic Grapher Version 6.0.2.256
Paessler ≫ Prtg Traffic Grapher Version 6.0.3.258
Paessler ≫ Prtg Traffic Grapher Version 6.0.3.259
Paessler ≫ Prtg Traffic Grapher Version 6.0.3.261
Paessler ≫ Prtg Traffic Grapher Version 6.0.3.262
Paessler ≫ Prtg Traffic Grapher Version 6.0.3.284
Paessler ≫ Prtg Traffic Grapher Version 6.0.3.285
Paessler ≫ Prtg Traffic Grapher Version 6.0.4.332
Paessler ≫ Prtg Traffic Grapher Version 6.0.4.333
Paessler ≫ Prtg Traffic Grapher Version 6.0.4.335
Paessler ≫ Prtg Traffic Grapher Version 6.0.4.336
Paessler ≫ Prtg Traffic Grapher Version 6.0.4.393
Paessler ≫ Prtg Traffic Grapher Version 6.0.4.394
Paessler ≫ Prtg Traffic Grapher Version 6.0.5.417
Paessler ≫ Prtg Traffic Grapher Version 6.0.5.441
Paessler ≫ Prtg Traffic Grapher Version 6.0.5.442
Paessler ≫ Prtg Traffic Grapher Version 6.0.5.450
Paessler ≫ Prtg Traffic Grapher Version 6.0.5.451
Paessler ≫ Prtg Traffic Grapher Version 6.0.6.585
Paessler ≫ Prtg Traffic Grapher Version 6.0.6.586
Paessler ≫ Prtg Traffic Grapher Version 6.0.6.601
Paessler ≫ Prtg Traffic Grapher Version 6.0.6.602
Paessler ≫ Prtg Traffic Grapher Version 6.0.6.625
Paessler ≫ Prtg Traffic Grapher Version 6.0.6.626
Paessler ≫ Prtg Traffic Grapher Version 6.0.6.675
Paessler ≫ Prtg Traffic Grapher Version 6.0.6.676
Paessler ≫ Prtg Traffic Grapher Version 6.1.0.683_beta
Paessler ≫ Prtg Traffic Grapher Version 6.1.0.750
Paessler ≫ Prtg Traffic Grapher Version 6.1.0.751
Paessler ≫ Prtg Traffic Grapher Version 6.1.0.753
Paessler ≫ Prtg Traffic Grapher Version 6.1.0.754
Paessler ≫ Prtg Traffic Grapher Version 6.1.0.756
Paessler ≫ Prtg Traffic Grapher Version 6.1.0.757
Paessler ≫ Prtg Traffic Grapher Version 6.1.1.854
Paessler ≫ Prtg Traffic Grapher Version 6.1.1.855
Paessler ≫ Prtg Traffic Grapher Version 6.2.0.907
Paessler ≫ Prtg Traffic Grapher Version 6.2.0.908
Paessler ≫ Prtg Traffic Grapher Version 6.2.1.950
Paessler ≫ Prtg Traffic Grapher Version 6.2.1.951
Paessler ≫ Prtg Traffic Grapher Version 6.2.1.957
Paessler ≫ Prtg Traffic Grapher Version 6.2.1.958
Paessler ≫ Prtg Traffic Grapher Version 6.2.1.963
Paessler ≫ Prtg Traffic Grapher Version 6.2.1.964
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.03% 0.593
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 4.3 8.6 2.9
AV:N/AC:M/Au:N/C:N/I:P/A:N
CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

http://blog.bkis.com/?p=704
http://secunia.com/advisories/35249
Vendor Advisory
http://www.paessler.com/support/kb/questions/prtg6history
Patch
Vendor Advisory
http://www.securityfocus.com/bid/35128