open redirect vulnerabilities and exploits

(subscribe to this query)

Open redirect vulnerability in the Global Redirect module 6.x-1.x prior to 6.x-1.4 and 7.x-1.x prior to 7.x-1.4 for Drupal, when non-clean to clean is enabled, allows remote malicious users to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the q p...

Nicholasthompson Global Redirect 6.x-1.0 Nicholasthompson Global Redirect 6.x-1.1 Nicholasthompson Global Redirect 6.x-1.2 Nicholasthompson Global Redirect 6.x-1.3 Nicholasthompson Global Redirect 6.x-1.x Nicholasthompson Global Redirect 7.x-1.3 Nicholasthompson Global Redirect 7.x-1.x

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Swapnil V. Patil Login and Logout Redirect.This issue affects Login and Logout Redirect: from n/a up to and including 2.0.3.

Swapnilpatil Login And Logout Redirect

An issue exists in Open-Xchange OX AppSuite prior to 7.8.0-rev27. The "defer" servlet offers to redirect a client to a specified URL. Since some checks were missing, arbitrary URLs could be provided as redirection target. Users can be tricked to follow a link to a trust...

Open-xchange Open-xchange Appsuite

An issue exists in Open-Xchange OX AppSuite prior to 7.8.0-rev27. The aria-label parameter of tiles at the Portal can be used to inject script code. Those labels use the name of the file (e.g. an image) which gets displayed at the portal application. Using script code at the file...

Open-xchange Open-xchange Appsuite

CRLF injection vulnerability in the redirect servlet in Open-Xchange AppSuite and Server prior to 6.22.0 rev15, 6.22.1 before rev17, 7.0.1 before rev6, and 7.0.2 before rev7 allows remote malicious users to inject arbitrary HTTP headers and conduct open redirect attacks by levera...

Open-xchange Open-xchange Appsuite 6.22.1 Open-xchange Open-xchange Server 7.0.2 Open-xchange Open-xchange Appsuite 6.22.0 Open-xchange Open-xchange Server 7.0.1 Open-xchange Open-xchange Appsuite 7.0.1 Open-xchange Open-xchange Server 6.22.1 Open-xchange Open-xchange Appsuite 7.0.2 Open-xchange Open-xchange Server 6.22.0

OX App Suite up to and including 7.10.6 has Uncontrolled Resource Consumption via a large location request parameter to the redirect servlet.

Open-xchange Open-xchange Appsuite Open-xchange Open-xchange Appsuite 7.10.5 Open-xchange Open-xchange Appsuite 7.10.6

OX App Suite up to and including 7.10.6 has Uncontrolled Resource Consumption via a large request body containing a redirect URL to the deferrer servlet.

Open-xchange Open-xchange Appsuite Open-xchange Open-xchange Appsuite 7.10.5 Open-xchange Open-xchange Appsuite 7.10.6

Multiple CRLF injection vulnerabilities in Open-Xchange Server prior to 6.20.7 rev14, 6.22.0 before rev13, and 6.22.1 before rev14 allow remote malicious users to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a crafted parameter, as demonstrated by...

Open-xchange Open-xchange Server 6.22.1 Open-xchange Open-xchange Server 6.20.7 Open-xchange Open-xchange Server 6.22.0

1 EDB exploit

Open Forms is an application for creating and publishing smart forms. Prior to versions 1.0.9 and 1.1.1, the cookie consent page in Open Forms contains an open redirect by injecting a `referer` querystring parameter and failing to validate the value. A malicious actor is able to ...

Maykinmedia Open Forms Maykinmedia Open Forms 1.10

An issue exists in Open-AudIT Professional 2.1. It is possible to inject a malicious payload in the redirect_url parameter to the /login URI to trigger an open redirect. A "data:text/html;base64," payload can be used with JavaScript code.

Open-audit Open-audit 2.1

1 2 3 4 5 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook