Vulnerability Details CVE-2006-2353
NmConsole/DeviceSelection.asp in Ipswitch WhatsUp Professional 2006 and WhatsUp Professional 2006 Premium allows remote attackers to redirect users to other websites via the (1) sCancelURL and possibly (2) sRedirectUrl parameters.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 33.8%
CVSS Severity
CVSS v2 Score 5.0
References
- http://secunia.com/advisories/20075
- http://securityreason.com/securityalert/897
- http://www.osvdb.org/25473
- http://www.securityfocus.com/archive/1/433808
- http://www.vupen.com/english/advisories/2006/1787
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26502
- http://secunia.com/advisories/20075
- http://securityreason.com/securityalert/897
- http://www.osvdb.org/25473
- http://www.securityfocus.com/archive/1/433808
- http://www.vupen.com/english/advisories/2006/1787
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26502
Products affected by CVE-2006-2353
-
cpe:2.3:a:ipswitch:whatsup_professional:2006
-
cpe:2.3:a:ipswitch:whatsup_professional:2006_premium