Description

Open redirect vulnerability in index.php (aka the Login Page) in ownCloud before 3.0.3 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the redirect_url parameter.

Remediation

References

CVE-2012-2270

Related Vulnerabilities

Apache HTTP Server Other Vulnerability (CVE-2003-0017)

WordPress Ultimate Member Plugin URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2022-1209)

WordPress Plugin WPUpper Share Buttons Cross-Site Scripting (3.42)

WordPress Plugin WP Dynamic Keywords Injector Cross-Site Request Forgery (2.3.15)

WordPress Plugin WP Private Content Plus Security Bypass (1.31)

Severity

Medium

Classification

CVE-2012-2270 CWE-20

Tags

Missing Update Known Vulnerabilities