CWE-601 Archives - CVE Vulnerability

CVE-2008-2951

Sun, 26 Feb 2023 09:09:46 +0000

Open redirect vulnerability in the search script in Trac before 0.10.5 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the q parameter, possibly related to the quickjump function.

The post CVE-2008-2951 appeared first on CVE Vulnerability.

CVE-2008-2052

Sun, 26 Feb 2023 09:09:19 +0000

Open redirect vulnerability in redirect.php in Bitrix Site Manager 6.5 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the goto parameter.

The post CVE-2008-2052 appeared first on CVE Vulnerability.

CVE-2008-1547

Sun, 26 Feb 2023 09:09:04 +0000

Open redirect vulnerability in exchweb/bin/redir.asp in Microsoft Outlook Web Access (OWA) for Exchange Server 2003 SP2 (aka build 6.5.7638) allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the URL parameter.

The post CVE-2008-1547 appeared first on CVE Vulnerability.

CVE-2018-8937

Sun, 26 Feb 2023 06:51:40 +0000

An issue was discovered in Open-AudIT Professional 2.1. It is possible to inject a malicious payload in the redirect_url parameter to the /login URI to trigger an open redirect. A “data:text/html;base64,” payload can be used with JavaScript code.

The post CVE-2018-8937 appeared first on CVE Vulnerability.

CVE-2018-8913

Sun, 26 Feb 2023 06:51:39 +0000

Missing custom error page vulnerability in Synology Web Station before 2.1.3-0139 allows remote attackers to conduct phishing attacks via a crafted URL.

The post CVE-2018-8913 appeared first on CVE Vulnerability.

CVE-2018-8813

Sun, 26 Feb 2023 06:51:36 +0000

Open redirect vulnerability in the login[redirect] parameter login functionality in WolfCMS 0.8.3.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a malformed URL.

The post CVE-2018-8813 appeared first on CVE Vulnerability.

CVE-2018-7797

Sun, 26 Feb 2023 06:51:10 +0000

A URL redirection vulnerability exists in Power Monitoring Expert, Energy Expert (formerly Power Manager) – EcoStruxure Power Monitoring Expert (PME) v8.2 (all editions), EcoStruxure Energy Expert 1.3 (formerly Power Manager), EcoStruxure Power SCADA Operation (PSO) 8.2 Advanced Reports and Dashboards Module, EcoStruxure Power Monitoring Expert (PME) v9.0, EcoStruxure Energy Expert v2.0, and EcoStruxure Power SCADA Operation (PSO) 9.0 Advanced Reports and Dashboards Module which could cause a phishing attack when redirected to a malicious site.

The post CVE-2018-7797 appeared first on CVE Vulnerability.

CVE-2018-7804

Sun, 26 Feb 2023 06:51:10 +0000

A URL Redirection to Untrusted Site vulnerability exists in the embedded web servers in all Modicon M340, Premium, Quantum PLCs and BMXNOR0200 where a user clicking on a specially crafted link can be redirected to a URL of the attacker’s choosing.

The post CVE-2018-7804 appeared first on CVE Vulnerability.

CVE-2018-7692

Sun, 26 Feb 2023 06:51:08 +0000

Unvalidated redirect vulnerability in in NetIQ eDirectory before 9.1.1 HF1.

The post CVE-2018-7692 appeared first on CVE Vulnerability.

CVE-2018-7674

Sun, 26 Feb 2023 06:51:07 +0000

The NetIQ Identity Manager user console, in versions prior to 4.7, is susceptible to URL redirection.

The post CVE-2018-7674 appeared first on CVE Vulnerability.