Detections
Analytics
Ipswitch WhatsUp Gold <= 8.04 Multiple Vulnerabilities
medium Nessus Plugin ID 19680
Language:
Synopsis
The remote web server can be used to reveal script source code and contains an ASP script that is prone to cross-site scripting attacks.Description
The remote host is running WhatsUp Gold, an applications and network monitor and management system for Windows from Ipswitch.The installed version of WhatsUp Gold returns a script's source code in response to a URI with an uppercase file extension. This may lead to the disclosure of sensitive information or subsequent attacks against the affected application. In addition, WhatsUp Gold also is prone to cross-site scripting attacks because it fails to sanitize user-supplied input to the 'map' parameter of the 'map.asp' script.
Solution
Unknown at this time.See Also
Plugin Details
Severity: Medium
ID: 19680
File Name: wug_804.nasl
Version: 1.18
Type: remote
Family: CGI abuses
Published: 9/12/2005
Updated: 4/11/2022
Configuration: Enable thorough checks (optional)
Supported Sensors: Nessus
Vulnerability Information
CPE: cpe:/a:ipswitch:whatsup_gold
Exploit Available: true
Exploit Ease: No exploit is required
Vulnerability Publication Date: 9/9/2005