78779vdb entry
http://osvdb.org/78779 CVE-2012-1023
4Images 1.7.10 - '/admin/index.php?redirect' Arbitrary Site Redirect
Record summary
CVE-2012-1023 has a selected CVSS score of 5.8; EIP currently links 1 catalogued exploit.
Description
Open redirect vulnerability in admin/index.php in 4images 1.7.10 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the redirect parameter.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDB4Images 1.7.10 - '/admin/index.php?redirect' Arbitrary Site RedirectExploitDB exploitby RandomStormNot analyzed1 file
References
5packetstormsecurity.org
http://packetstormsecurity.org/files/109290/4images-xss.txt 51774vdb entry
http://www.securityfocus.com/bid/51774 4images-index-open-redirect(72925)vdb entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/72925 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2012-1023