Check CVE Id
Check CWE Id
PRTG Network Monitor version 18.104.22.16830 is vulnerable to reflected Cross-Site Scripting on error.htm (the error page), via the errormsg parameter.
Prtg network monitor
CVSS Base Score
PRTG before 22.214.171.1246 has Cross Site Scripting (XSS) in the WEBGUI.
PRTG Network Monitor before 126.96.36.1993 allows an authenticated user with a read-only account to create another user with a read-write account (including administrator) via an HTTP request because /api/addusers doesn't check, or doesn't properly che...
PRTG Network Monitor before 188.8.131.523 allows remote unauthenticated attackers to create users with read-write privileges (including administrator). A remote unauthenticated user can craft an HTTP request and override attributes of the 'include' di...
PRTG Network Monitor before 184.108.40.2064 allows a remote authenticated attacker (with read-write privileges) to execute arbitrary code and OS commands with system privileges. When creating an HTTP Advanced Sensor, the user's input in the POST paramet...
PRTG Network Monitor before 220.127.116.112 allows remote unauthenticated attackers to terminate the PRTG Core Server Service via a special HTTP request.
In Paessler PRTG Network Monitor 18.104.22.16830, it's possible to create a Map as a read-only user, by forging a request and sending it to the server.
PRTG Network Monitor 22.214.171.12430 allows remote authenticated administrators to execute arbitrary code by uploading a .exe file and then proceeding in spite of the error message.
Back to Top