Multiple open redirect vulnerabilities in One Click Orgs prior to 1.2.3 allow (1) remote malicious users to redirect users to arbitrary web sites and conduct phishing attacks via the return_to parameter, and allow (2) remote authenticated users to redirect users to arbitrary web sites and conduct phishing attacks via crafted characters in the domain name of a subdomain.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
oneclickorgs one click orgs 1.0.1 |
||
oneclickorgs one click orgs |
||
oneclickorgs one click orgs 1.2.1 |
||
oneclickorgs one click orgs 1.2.0 |
||
oneclickorgs one click orgs 1.1.1 |
||
oneclickorgs one click orgs 1.1.0 |
||
oneclickorgs one click orgs 1.0.0 |
Vulmon