5.8
CVE-2008-7269
- EPSS 9.25%
- Veröffentlicht 01.12.2010 16:06:12
- Zuletzt bearbeitet 16.06.2026 23:03:57
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
LoginOpen redirect vulnerability in api.php in SiteEngine 5.x allows user-assisted remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the forward parameter in a logout action.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Boka ≫ Siteengine Version5.0
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 9.25% | 0.947 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 5.8 | 8.6 | 4.9 |
AV:N/AC:M/Au:N/C:N/I:P/A:P
|
CWE-20 Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.
http://www.securityfocus.com/archive/1/497747/100/0/threaded
https://www.exploit-db.com/exploits/6823
http://www.securityfocus.com/bid/31888