5.8
CVSSv2

CVE-2013-4723

Published: 25/04/2014 Updated: 25/04/2014
CVSS v2 Base Score: 5.8 | Impact Score: 4.9 | Exploitability Score: 8.6
VMScore: 516
Vector: AV:N/AC:M/Au:N/C:P/I:P/A:N

Vulnerability Summary

Open redirect vulnerability in DDSN Interactive cm3 Acora CMS 6.0.6/1a, 6.0.2/1a, 5.5.7/12b, 5.5.0/1b-p1, and possibly other versions allows remote malicious users to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the l parameter to track.aspx.

Vulnerable Product Search on Vulmon Subscribe to Product

ddsn cm3 acora content management system 5.5.7\\/12b

ddsn cm3 acora content management system 5.5.0\\/1b-p1

ddsn cm3 acora content management system 6.0.6\\/1a

ddsn cm3 acora content management system 6.0.2\\/1a

Exploits

CM3 AcoraCMS versions 606/1a, 602/1a, 557/12b, and 550/1b-p1 suffer from cross site request forgery, cross site scripting, information disclosure, weak cookies, and URL redirection vulnerabilities ...