Cross-Site Scripting Vulnerabilities in SonicWALL SOHO Products
CVE-2005-1006

Currently unrated

Key Information:

Vendor

Sonicwall
Status
Soho Firmware
Vendor
CVE Published:
2 May 2005

What is CVE-2005-1006?

Multiple cross-site scripting (XSS) vulnerabilities in SonicWALL SOHO 5.1.7.0 enable remote attackers to exploit the system by injecting arbitrary web scripts or HTML. This can be achieved through manipulating the URL or the user login name, which remains improperly filtered when the administrator accesses log files. Successful exploitation can lead to unauthorized actions, potentially compromising sensitive information and disrupting the integrity of the affected systems.

References

http://www.oliverkarow.de/research/SonicWall.txt
x_refsource_MISC
http://secunia.com/advisories/14823
third-party-advisoryx_refsource_SECUNIA
https://exchange.xforce.ibmcloud.com/vulnerabilities/19960
vdb-entryx_refsource_XF

EPSS Score

6% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.