Unscored severity · published May 15, 2006
CVE-2006-2353
NmConsole/DeviceSelection.asp in Ipswitch WhatsUp Professional 2006 and WhatsUp Professional 2006 Premium allows remote attackers to redirect users to other websites via the (1)…
–
CVSS
3.1%
EPSS
No
On KEV
Description
NmConsole/DeviceSelection.asp in Ipswitch WhatsUp Professional 2006 and WhatsUp Professional 2006 Premium allows remote attackers to redirect users to other websites via the (1) sCancelURL and possibly (2) sRedirectUrl parameters.
Exploitation
Is it being used?
Exploit prediction (EPSS)3.1% · higher than 88% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
WP
Whatsup Professional · Ipswitch
2006; 2006_premium · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-2353
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-2353
Vendor Advisory
http://secunia.com/advisories/20075
securityreason.com
http://securityreason.com/securityalert/897
www.osvdb.org
http://www.osvdb.org/25473
Vendor Advisory
http://www.securityfocus.com/archive/1/433808
Vendor Advisory
http://www.vupen.com/english/advisories/2006/1787
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/26502
More from Whatsup Professional
–
CVE-2006-2351
Multiple cross-site scripting (XSS) vulnerabilities in IPswitch WhatsUp Professional 2006 and WhatsUp Professional 2006 Premium allow remote attackers to inject arbitrary web…
–
CVE-2006-2352
Multiple cross-site scripting (XSS) vulnerabilities in IPswitch WhatsUp Professional 2006 and WhatsUp Professional 2006 Premium allow remote attackers to inject arbitrary web…
–
CVE-2006-2354
NmConsole/Login.asp in Ipswitch WhatsUp Professional 2006 and Ipswitch WhatsUp Professional 2006 Premium generates different error messages in a way that allows remote attackers…
–
CVE-2006-2355
Ipswitch WhatsUp Professional 2006 and Ipswitch WhatsUp Professional 2006 Premium allows remote attackers to obtain full path information via 404 error messages
–
CVE-2006-2356
NmConsole/utility/RenderMap.asp in Ipswitch WhatsUp Professional 2006 and WhatsUp Professional 2006 Premium allows remote attackers to obtain sensitive information about network…