CVE-2006-2351

Multiple cross-site scripting (XSS) vulnerabilities in IPswitch WhatsUp Professional 2006 and WhatsUp Professional 2006 Premium allow remote attackers to inject arbitrary web script or HTML via the (1) sDeviceView or (2) nDeviceID parameter to (a) NmConsole/Navigation.asp or (3) sHostname parameter to (b) NmConsole/ToolResults.asp.

• CWE-79

• http://secunia.com/advisories/20075Exploit, Vendor Advisory
• http://securityreason.com/securityalert/897
• http://www.osvdb.org/25469
• http://www.osvdb.org/25470
• http://www.securityfocus.com/archive/1/433808Exploit, Vendor Advisory
• http://www.securityfocus.com/bid/17964Exploit
• http://www.vupen.com/english/advisories/2006/1787Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/26500
• http://secunia.com/advisories/20075Exploit, Vendor Advisory
• http://securityreason.com/securityalert/897
• http://www.osvdb.org/25469
• http://www.osvdb.org/25470
• http://www.securityfocus.com/archive/1/433808Exploit, Vendor Advisory
• http://www.securityfocus.com/bid/17964Exploit
• http://www.vupen.com/english/advisories/2006/1787Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/26500

Published

May 15, 2006

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2006-2345Cross-site scripting (XSS) vulnerability in inc/elementz.php…
• CVE-2006-2346vpopmail 5.4.14 and 5.4.15, with cleartext passwords enabled…
• CVE-2006-2347E-Business Designer (eBD) 3.1.4 and earlier allows remote at…
• CVE-2006-2348Cross-site scripting (XSS) vulnerability in form_grupo.html …
• CVE-2006-2349E-Business Designer (eBD) 3.1.4 and earlier allows remote at…
• CVE-2006-2350Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2006-2352Multiple cross-site scripting (XSS) vulnerabilities in IPswi…
• CVE-2006-2353NmConsole/DeviceSelection.asp in Ipswitch WhatsUp Profession…
• CVE-2006-2354NmConsole/Login.asp in Ipswitch WhatsUp Professional 2006 an…
• CVE-2006-2355Ipswitch WhatsUp Professional 2006 and Ipswitch WhatsUp Prof…
• CVE-2006-2356NmConsole/utility/RenderMap.asp in Ipswitch WhatsUp Professi…
• CVE-2006-2357Ipswitch WhatsUp Professional 2006 and WhatsUp Professional …