NmConsole/DeviceSelection.asp in Ipswitch WhatsUp Professional 2006 and WhatsUp Professional 2006 Premium allows remote attackers to redirect users to other websites via the (1) sCancelURL and possibly (2) sRedirectUrl parameters.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Whatsup_professional | Ipswitch | 2006 (including) | 2006 (including) |
| Whatsup_professional | Ipswitch | 2006_premium (including) | 2006_premium (including) |
References
- http://secunia.com/advisories/20075
- http://securityreason.com/securityalert/897
- http://www.osvdb.org/25473
- http://www.securityfocus.com/archive/1/433808
- http://www.vupen.com/english/advisories/2006/1787
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26502
- http://secunia.com/advisories/20075
- http://securityreason.com/securityalert/897
- http://www.osvdb.org/25473
- http://www.securityfocus.com/archive/1/433808
- http://www.vupen.com/english/advisories/2006/1787
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26502