Check CVE Id
Check CWE Id
PRTG Network Monitor version 126.96.36.19930 is vulnerable to reflected Cross-Site Scripting on error.htm (the error page), via the errormsg parameter.
Prtg network monitor
CVSS Base Score
PRTG Network Monitor before 188.8.131.523 allows an authenticated user with a read-only account to create another user with a read-write account (including administrator) via an HTTP request because /api/addusers doesn't check, or doesn't properly che...
PRTG Network Monitor before 184.108.40.2063 allows remote unauthenticated attackers to create users with read-write privileges (including administrator). A remote unauthenticated user can craft an HTTP request and override attributes of the 'include' di...
PRTG Network Monitor before 220.127.116.114 allows a remote authenticated attacker (with read-write privileges) to execute arbitrary code and OS commands with system privileges. When creating an HTTP Advanced Sensor, the user's input in the POST paramet...
PRTG Network Monitor before 18.104.22.1682 allows remote unauthenticated attackers to terminate the PRTG Core Server Service via a special HTTP request.
In Paessler PRTG Network Monitor 22.214.171.12430, it's possible to create a Map as a read-only user, by forging a request and sending it to the server.
PRTG Network Monitor 126.96.36.19930 allows remote authenticated administrators to execute arbitrary code by uploading a .exe file and then proceeding in spite of the error message.
PRTG Network Monitor version 188.8.131.5230 is vulnerable to stored Cross-Site Scripting on all sensor titles, related to incorrect error handling for a %00 in the SRC attribute of an IMG element.
Back to Top