CVE-2006-2353

NmConsole/DeviceSelection.asp in Ipswitch WhatsUp Professional 2006 and WhatsUp Professional 2006 Premium allows remote attackers to redirect users to other websites via the (1) sCancelURL and possibly (2) sRedirectUrl parameters.

Score

CVSS 2.0 5.0 Medium

Status

Modified - cve@mitre.org

Published

2006-05-15

Last modified

2024-08-07

Weaknesses

CWE-264

Affected products

• Whatsup Professional (Ipswitch)

References

• http://secunia.com/advisories/20075
• http://securityreason.com/securityalert/897
• http://www.osvdb.org/25473
• http://www.securityfocus.com/archive/1/433808
• http://www.vupen.com/english/advisories/2006/1787
• https://exchange.xforce.ibmcloud.com/vulnerabilities/26502