Vulnerability-Lookup

GHSA-X88Q-J53W-3QCX

Vulnerability from github – Published: 2022-05-01 06:58 – Updated: 2022-05-01 06:58

Details

NmConsole/DeviceSelection.asp in Ipswitch WhatsUp Professional 2006 and WhatsUp Professional 2006 Premium allows remote attackers to redirect users to other websites via the (1) sCancelURL and possibly (2) sRedirectUrl parameters.

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2006-2353"
  ],
  "database_specific": {
    "cwe_ids": [],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2006-05-15T10:02:00Z",
    "severity": "MODERATE"
  },
  "details": "NmConsole/DeviceSelection.asp in Ipswitch WhatsUp Professional 2006 and WhatsUp Professional 2006 Premium allows remote attackers to redirect users to other websites via the (1) sCancelURL and possibly (2) sRedirectUrl parameters.",
  "id": "GHSA-x88q-j53w-3qcx",
  "modified": "2022-05-01T06:58:16Z",
  "published": "2022-05-01T06:58:16Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2006-2353"
    },
    {
      "type": "WEB",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/26502"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/20075"
    },
    {
      "type": "WEB",
      "url": "http://securityreason.com/securityalert/897"
    },
    {
      "type": "WEB",
      "url": "http://www.osvdb.org/25473"
    },
    {
      "type": "WEB",
      "url": "http://www.securityfocus.com/archive/1/433808"
    },
    {
      "type": "WEB",
      "url": "http://www.vupen.com/english/advisories/2006/1787"
    }
  ],
  "schema_version": "1.4.0",
  "severity": []
}

CVE-2006-2353 (GCVE-0-2006-2353)

Vulnerability from cvelistv5 – Published: 2006-05-15 10:00 – Updated: 2024-08-07 17:51

Summary

Severity

No CVSS data available.

CWE

Assigner

mitre

References

6 references

URL	Tags
https://exchange.xforce.ibmcloud.com/vulnerabilit…	vdb-entryx_refsource_XF
http://www.securityfocus.com/archive/1/433808	mailing-listx_refsource_BUGTRAQ
http://secunia.com/advisories/20075	third-party-advisoryx_refsource_SECUNIA
http://www.vupen.com/english/advisories/2006/1787	vdb-entryx_refsource_VUPEN
http://securityreason.com/securityalert/897	third-party-advisoryx_refsource_SREASON
http://www.osvdb.org/25473	vdb-entryx_refsource_OSVDB

Date Public

2006-05-11 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T17:51:03.514Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "whatsup-deviceselection-user-redirect(26502)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/26502"
          },
          {
            "name": "20060511 Ipswitch WhatsUp Professional multiple flaws",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/433808"
          },
          {
            "name": "20075",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/20075"
          },
          {
            "name": "ADV-2006-1787",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2006/1787"
          },
          {
            "name": "897",
            "tags": [
              "third-party-advisory",
              "x_refsource_SREASON",
              "x_transferred"
            ],
            "url": "http://securityreason.com/securityalert/897"
          },
          {
            "name": "25473",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://www.osvdb.org/25473"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2006-05-11T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "NmConsole/DeviceSelection.asp in Ipswitch WhatsUp Professional 2006 and WhatsUp Professional 2006 Premium allows remote attackers to redirect users to other websites via the (1) sCancelURL and possibly (2) sRedirectUrl parameters."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-07-19T15:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "whatsup-deviceselection-user-redirect(26502)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/26502"
        },
        {
          "name": "20060511 Ipswitch WhatsUp Professional multiple flaws",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/433808"
        },
        {
          "name": "20075",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/20075"
        },
        {
          "name": "ADV-2006-1787",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2006/1787"
        },
        {
          "name": "897",
          "tags": [
            "third-party-advisory",
            "x_refsource_SREASON"
          ],
          "url": "http://securityreason.com/securityalert/897"
        },
        {
          "name": "25473",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://www.osvdb.org/25473"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2006-2353",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "NmConsole/DeviceSelection.asp in Ipswitch WhatsUp Professional 2006 and WhatsUp Professional 2006 Premium allows remote attackers to redirect users to other websites via the (1) sCancelURL and possibly (2) sRedirectUrl parameters."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "whatsup-deviceselection-user-redirect(26502)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/26502"
            },
            {
              "name": "20060511 Ipswitch WhatsUp Professional multiple flaws",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/433808"
            },
            {
              "name": "20075",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/20075"
            },
            {
              "name": "ADV-2006-1787",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2006/1787"
            },
            {
              "name": "897",
              "refsource": "SREASON",
              "url": "http://securityreason.com/securityalert/897"
            },
            {
              "name": "25473",
              "refsource": "OSVDB",
              "url": "http://www.osvdb.org/25473"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2006-2353",
    "datePublished": "2006-05-15T10:00:00.000Z",
    "dateReserved": "2006-05-14T00:00:00.000Z",
    "dateUpdated": "2024-08-07T17:51:03.514Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

GHSA-X88Q-J53W-3QCX

CVE-2006-2353 (GCVE-0-2006-2353)

Tags

Sightings

Nomenclature